Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TechExcel CustomerWise formerly TechExcel CRM allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier before SVN 20070910 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a similar issue to CVE-2007-4828...

CVE-2007-4828

Cross-site scripting XSS vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4819

Multiple cross-site scripting XSS vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via 1 the val parameter to alphabet.php in an alpha.albums action, or the PATHINFO to 2 random.php or 3 admin/hidden.php...

CVE-2007-4811

Multiple cross-site scripting XSS vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via 1 the val parameter to alphabet.php in an alpha.albums action, or the PATHINFO to 2 random.php or 3 admin/hidden.php...

CVE-2007-4745

AkoBook 3.42 and earlier (component com_akobook) for Mambo contain multiple cross-site scripting (XSS) vulnerabilities. The issue arises in the sign function, where attacker-controlled Javascript events in the parameters (gbmail and gbpage) can be injected to execute scripts in the victim’s brows...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the 1 dtc, 2 vid, 3 n, 4 dt, 5 ed, and 6 bd parameters...

CVE-2007-4713

Multiple cross-site scripting XSS vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the 1 dtc, 2 vid, 3 n, 4 dt, 5 ed, and 6 bd parameters...

CVE-2007-4717

Multiple cross-site scripting XSS vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 dir parameter in admin/adminusers.php, the 2 action parameter in admin/advancedUserSearch.php, and the 3 view parameter in...

CVE-2007-4633

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

CVE-2007-4630

Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4624

Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4630

Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in tiki-remindpassword.php in Tikiwiki aka Tiki CMS/Groupware 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: this issue might be related to CVE-2006-2635.7...

CVE-2007-4554

Cross-site scripting XSS vulnerability in tiki-remindpassword.php in Tikiwiki aka Tiki CMS/Groupware 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: this issue might be related to CVE-2006-2635.7...

Cross site scripting

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...