7973 matches found
CVE-2005-2603
Cross-site scripting XSS vulnerability in index.php for My Image Gallery Mig 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the 1 currDir or 2 image parameters...
CVE-2005-2610: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2004-2332
Multiple cross-site scripting XSS vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2004-2358
Cross-site scripting XSS vulnerability in adminwords.php for phpBB 2.0.6c allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2004-2325: Undefined Security Weakness
Cross-site scripting XSS vulnerability in EditModule.aspx for DotNetNuke formerly IBuySpy Workshop 1.0.6 through 1.0.10d allows remote attackers to inject arbitrary web script or HTML...
CVE-2005-2545
Multiple cross-site scripting XSS vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content parameter to profile.php and profilemisc.php, 3 the profile fields in userpage.php, 4 subject or 5 body in mail.php, or 8...
CVE-2005-2545
Multiple cross-site scripting XSS vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content parameter to profile.php and profilemisc.php, 3 the profile fields in userpage.php, 4 subject or 5 body in mail.php, or 8...
CVE-2005-2488
Cross-site scripting XSS vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via 1 the strRootpath parameter to validsession.php or 2 the strTable parameter to Admin/News/List.php...
CVE-2005-2488
Cross-site scripting XSS vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via 1 the strRootpath parameter to validsession.php or 2 the strTable parameter to Admin/News/List.php...
CVE-2005-2480
Cross-site scripting XSS vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter, which is not quoted in an error page, as demonstrated using index.cfm...
CVE-2002-2107
Cross-site scripting XSS vulnerability in the lookup script in Veridis OpenKeyServer OKS 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2005-2441
Multiple cross-site scripting XSS vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the 1 UserName parameter to profile.php or 2 UserID parameter to login.php...
CVE-2005-2435
Cross-site scripting XSS vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTML via the dir parameter...
CVE-2005-2416
Multiple cross-site scripting XSS vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 term parameter to the search module or 2 title in the blog aggregation module...
CVE-2005-2380
Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the 1 sid, 2 start, and 3 id parameters to browse.php, or the sid parameter to 4 dataentry.php or 5 export.php...
CVE-2005-2332
Cross-site scripting XSS vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web script or HTML via the username parameter to 1 admin.php or 2 login.php...
CVE-2005-2333
Cross-site scripting XSS vulnerability in smiliespopup.php in SEO-Board 1.0 allows remote attackers to inject arbitrary web script or HTML via the doc parameter...
CVE-2005-2299
Multiple cross-site scripting XSS vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 FID parameter to forum.cfm, 2 UID parameter to user.cfm, 3 TID parameter to thread.cfm, or 4 PostDate parameter to search.cfm...
CVE-2005-2322
Cross-site scripting XSS vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the 1 viewuserid or 2 group parameter to users.php...