4986 matches found
CVE-2006-0493
Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...
Cross site scripting
Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...
CVE-2006-0493
Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...
CVE-2006-0493
The CVE-2006-0493 entry describes a Cross-site Scripting (XSS) vulnerability in MG2 (formerly Minigal) version 0.5.1. The issue allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment attached to a picture. The available sources confirm the affected software...
XSS flaw in MG2 Image Gallery (v.0.5.1)
Users can inject XSS into the form field "Name", when adding a comment on a picture. This will lead to the execution of XSS code. Simple scripting like scriptalert'hello'/script , and more advanced document.location, and document.cookie works. This has been tested on version 0.5.1. Other versions...
CVE-2006-0443: Undefined Security Weakness
Cross-site scripting XSS vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 realname and 2 comment parameters, or 3 via a javascript URI in the url parameter, when adding a comment...
CVE-2006-0409
Cross-site scripting XSS vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup...
CVE-2006-0409
Cross-site scripting XSS vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup...
CVE-2006-0409: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup...
CVE-2006-0361: Undefined Security Weakness
Cross-site scripting XSS vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an tag in the comment parameter, which strips most tags but not...
Cross site scripting
Cross-site scripting XSS vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php...
CVE-2006-0346
Cross-site scripting XSS vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php...
CVE-2006-0346
Cross-site scripting XSS vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php...
DEBIAN-CVE-2006-0322
Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service infinite loop via "certain malformed links."...
CVE-2006-0322
Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service infinite loop via "certain malformed links."...
CVE-2006-0322: Undefined Security Weakness
Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service infinite loop via "certain malformed links."...
CVE-2005-4649
Multiple cross-site scripting XSS vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the entry parameter in index.php and 2 the gbid parameter in comment.php. NOTE: The index.php/entry vector might be resultant from CVE-2005-154...
CVE-2006-0198
CVE-2006-0198 describes a Cross-site scripting (XSS) vulnerability in a XOOPS module (possibly poll or Pool) where remote attackers can inject arbitrary web script or HTML via the SRC attribute of an IMG element in a comment. The issue is documented with a MEDIUM base score (4.3) and partial inte...