CVE-2006-4106

Cross-site scripting XSS vulnerability in blursoft blur6ex 0.3 allows remote attackers to inject arbitrary web script or HTML via a comment title...

CVE-2006-4106

The CVE-2006-4106 entry documents a Cross-site Scripting (XSS) vulnerability in blursoft blur6ex 0.3, exploitable by remote attackers to inject arbitrary web script or HTML via a comment title. The affected component is the blur6ex 0.3 product; the root cause is improper sanitization of the comme...

CVE-2006-4091

Multiple cross-site scripting XSS vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Comment section...

CVE-2006-4090

CVE-2006-4090 describes a cross-site scripting (XSS) vulnerability in Webligo BlogHoster 2.2. The issue arises in the comment posting flow, likely involving the nickname parameter in previewcomment.php and the From: part of the comment post, allowing remote attackers to inject arbitrary web scrip...

CVE-2006-4091

Multiple cross-site scripting XSS vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Comment section...

CVE-2006-4090

Cross-site scripting XSS vulnerability in Webligo BlogHoster 2.2 allows remote attackers to inject arbitrary web script or HTML via the "From: part of the comment post," probably involving the nickname parameter to previewcomment.php...

CVE-2006-4088

Multiple cross-site scripting XSS vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Subject, 2 Comment, and 3 Add new comment sections...

CVE-2006-4069

Multiple cross-site scripting XSS vulnerabilities in Elaine Aquino Online Zone Journals OZJournals 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 m and 2 c parameters in index.php, 3 a search action, and 4 a "submit comment" action...

OZJournal v1.5 - XSS

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

GnuPG Parse_Comment Remote Buffer Overflow

Integer overflow in parsecomment in GnuPG gpg 1.4.4 allows remote attackers to cause a denial of service segmentation fault via a crafted message...

DEBIAN-CVE-2006-3746

Integer overflow in parsecomment in GnuPG gpg 1.4.4 allows remote attackers to cause a denial of service segmentation fault via a crafted message...

CVE-2006-3767

Cross-site scripting XSS vulnerability in showprofile.php in Darren's $5 Script Archive osDate 1.1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the onerror attribute in an HTML IMG tag with a non-existent source file in txtcomment parameter, which is used when...

CVE-2006-3756

Cross-site scripting XSS vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in 1 lib-comment.php 1.4.0sr4 or 2 comment.php 0.3.11sr6...

CVE-2006-3767

The CVE-2006-3767 entry describes a Cross-site Scripting (XSS) vulnerability in Darren's osDate 1.1.7 and earlier (showprofile.php) that allows remote attackers to inject arbitrary script/HTML via the onerror attribute in an HTML IMG tag with a non-existent src, used when posting a comment (txtco...

CVE-2006-3173

Multiple PHP remote file inclusion vulnerabilities in ContentBuilder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathcb parameter to a libraries/comment/postComment.php and b modules/poll/poll.php, 2 rel parameter to c modules/archive/overview.inc.php, and the 3...

apnaspace.txt

Apnaspace.com A myspace type site for arab & indian teens Homepage: http://www.http://www.apnaspace.com Effected files: Comment input box: Posting a blog entry: - Entry title - Entry body Viewing a profile Posting a bulletin. Commenting on a picture Sending mail to someone...

Cross site scripting

Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...

CVE-2006-2837

CVE-2006-2837 describes a cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book. The flaw allows remote attackers to inject arbitrary web script or HTML through certain comment fields on the Sign Our GuestBook page, most likely the x_Comments parameter to guestbookadd.asp. The conn...

CVE-2006-2837

Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...

Cross site scripting

Cross-site scripting XSS vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an IMG element...