7973 matches found
CVE-2005-4588
Cross-site scripting XSS vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4567
Multiple cross-site scripting XSS vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 Build 4.4.000 Oct 26 2005 allow remote attackers to inject arbitrary web script or HTML by sending 1 the href parameter to index.fts, or the param1 parameter to 2 /domains/index.fts, 3...
CVE-2005-4577
Multiple cross-site scripting XSS vulnerabilities in Hitachi Business Logic - Container BLC P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in an unspecified input form...
CVE-2005-4577: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Hitachi Business Logic - Container BLC P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in an unspecified input form...
CVE-2005-4571: Undefined Security Weakness
Cross-site scripting XSS vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4555: Undefined Security Weakness
Cross-site scripting XSS vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ENTERARTICLETITLE, 2 SPECIFYZONE, 3 ENTERARTICLEHEADER, and 4 ENTERARTICLEBODY indices in the language array parameter...
CVE-2005-4512
Cross-site scripting XSS vulnerability in WAXTRAPP 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...
CVE-2005-4513
Cross-site scripting XSS vulnerability in WANDSOFT e-SEARCH allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keywords parameter...
CVE-2005-4507: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Nexus Concepts Dev Hound 2.24 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple unspecified user input fields...
CVE-2005-4493
Cross-site scripting XSS vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...
CVE-2005-4483
Cross-site scripting XSS vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...
CVE-2005-4492
Cross-site scripting XSS vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the norelayhighlightwords parameter...
CVE-2005-4493
Cross-site scripting XSS vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...
CVE-2005-4498
Cross-site scripting XSS vulnerability in Text-e 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...
CVE-2005-4496: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
CVE-2005-4446
Cross-site scripting XSS vulnerability in index.asp in ASPBite 8.x allows remote attackers to inject arbitrary web script or HTML via the strSearch parameter...
CVE-2005-4433
Cross-site scripting XSS vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field...
CVE-2005-4435
Cross-site scripting XSS vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4432
Cross-site scripting XSS vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter...
CVE-2005-4434: Undefined Security Weakness
Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...