CVE-2006-1752: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...

CVE-2006-1110

Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...

Cross site scripting

Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...

CVE-2006-1110

Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...

CVE-2006-1110: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...

CVE-2006-0782

Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of 1 the reply parameter, possibly involving injection of 2 the name parameter and...

Cross site scripting

Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting XSS vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parameter...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...

CVE-2005-3896

Mozilla allows remote attackers to cause a denial of service CPU consumption via a Javascript BODY onload event that calls the window function...

CVE-2005-3896: Undefined Security Weakness

Mozilla allows remote attackers to cause a denial of service CPU consumption via a Javascript BODY onload event that calls the window function...

CVE-2005-3897: Undefined Security Weakness

Apple Safari 2.0.2 allows remote attackers to cause a denial of service system slowdown via a Javascript BODY onload event that calls the window function...

Microsoft Internet Explorer code execution

Uninitilized memory call on Window function within OnLoad handler of BODY tag allows code execution...

CVE-2005-3428: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body...

Hitachi Cosminexus logical bug

For HTTP POST request with empty body data from previous POST request is used...

CVE-2005-3103: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the 1 title, 2 category, 3 body, 4 extended body, and 5 excerpt form fields in new blog entries...

CVE-2005-2298: Undefined Security Weakness

BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards...

PT-2005-3016 · Php Fusion · Php-Fusion

Name of the Vulnerable Software and Affected Versions: PHP-Fusion version 6.0.105 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a news or article post. The vulnerability possibly involves the news body, article description, or...

CVE-2005-1790: Undefined Security Weakness

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service crash and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

DEBIAN-CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...