CVE-2008-7098

Multiple cross-site scripting XSS vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the 1 Title and 2 Text fields; 3 the gallery, possibly the Description field in Your Pictures; 4 the forum, possibly the Your Message fiel...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to 1 servlet/com.threeis.webta.H710selProject and 2 servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial repo...

CVE-2008-6666: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to 1 servlet/com.threeis.webta.H710selProject and 2 servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial repo...

CVE-2008-4571

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

CVE-2008-4571

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

Cross site scripting

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

CVE-2008-4571

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

PT-2008-5790

Name of the Vulnerable Software and Affected Versions Plone versions prior to 3.0.4 Description A cross-site scripting issue exists due to insufficient input validation in the LiveSearch module. This allows remote attackers to inject arbitrary web script or HTML via the Description field for sear...

CVE-2008-4571: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...

CVE-2006-7143: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field...

CVE-2006-5122

Multiple cross-site scripting XSS vulnerabilities in Mercury SiteScope 8.2 8.1.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 "any field create name field" except "create new group name" or 2 any description field...

CVE-2006-5122: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Mercury SiteScope 8.2 8.1.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 "any field create name field" except "create new group name" or 2 any description field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Serge Rey gtd-php aka Getting Things Done 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in 1 newProject.php, 2 newList.php, and 3 newWaitingOn.php; the Title field in 4 newProject.php, 5 newList.php...

CVE-2006-1479

Multiple cross-site scripting XSS vulnerabilities in Serge Rey gtd-php aka Getting Things Done 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in 1 newProject.php, 2 newList.php, and 3 newWaitingOn.php; the Title field in 4 newProject.php, 5 newList.php...

CVE-2006-1479

Multiple cross-site scripting XSS vulnerabilities in Serge Rey gtd-php aka Getting Things Done 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in 1 newProject.php, 2 newList.php, and 3 newWaitingOn.php; the Title field in 4 newProject.php, 5 newList.php...

CVE-2006-1479: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Serge Rey gtd-php aka Getting Things Done 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in 1 newProject.php, 2 newList.php, and 3 newWaitingOn.php; the Title field in 4 newProject.php, 5 newList.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Description field. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1270

Multiple cross-site scripting XSS vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Description field. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1270: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Description field. NOTE: the provenance of this information is unknown; the details are obtained from third party information...