CVE-2006-2641

UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in John Frank Asset Manager AssetMan 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is...

CVE-2006-2643

Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...

CVE-2006-2641

Technical details for CVE-2006-2641 are not publicly available in the provided documents; no affected product, component, or exploit information is specified. Monitor for updates.

CVE-2006-2641: Undefined Security Weakness

UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in John Frank Asset Manager AssetMan 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is...

CVE-2006-2642: Undefined Security Weakness

UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in Marco M. F. De Santis Php-residence 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure i...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...

CVE-2006-2618

Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...

CVE-2006-2571

Cross-site scripting XSS vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action...

CVE-2006-2536

Cross-site scripting XSS vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 "Search" term parameter in index.php and 2 "Add a Site" add.php fields...

Cross site scripting

Cross-site scripting XSS vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 "Search" term parameter in index.php and 2 "Add a Site" add.php fields...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Hiox Guestbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input forms for signing the guestbook...

Cross site scripting

Cross-site scripting XSS vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs...

CVE-2006-2510

Cross-site scripting XSS vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs...

Cross site scripting

Cross-site scripting XSS vulnerability in addnews.asp in CodeAvalanche News CANews 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field. NOTE: if this issue is limited to administrators, and if it is expected behavior for administrators to be able to generate...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in 1 the query string to help/help,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Spymac WebOS WOS 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 delfolder, 2 nick, or 3 action parameters to a notes/index.php, 4 curr parameter to b ipod/getipod.php, and in c login.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

Cross site scripting

DISPUTED Cross-site scripting XSS vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product. The vendor states "You cannot inser...

CVE-2006-2431

Cross-site scripting XSS vulnerability in the 500 Internal Server Error page on the SOAP port 8880/tcp in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is...

Cross site scripting

Cross-site scripting XSS vulnerability in the 500 Internal Server Error page on the SOAP port 8880/tcp in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is...