Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2010-4610: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML via the error parameter...

slickMsg 0.7-alpha Cross Site Scripting

www.eVuln.com advisory: error - Non-persistent XSS in slickMsg Summary: http://evuln.com/vulns/163/summary.html Details: http://evuln.com/vulns/163/description.html -----------Summary----------- eVuln ID: EV0163 Software: slickMsg Vendor: n/a Version: 0.7-alpha Critical Level: low Type: Cross Sit...

CVE-2010-1095

Cross-site scripting XSS vulnerability in loginresetpasswordpage.php in Tracking Requirements & Use Cases TRUC 0.11.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained...

Cross site scripting

Cross-site scripting XSS vulnerability in loginresetpasswordpage.php in Tracking Requirements & Use Cases TRUC 0.11.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2010-1095: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in loginresetpasswordpage.php in Tracking Requirements & Use Cases TRUC 0.11.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2009-4347

Cross-site scripting XSS vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2009-4347

This CVE covers a cross-site scripting (XSS) vulnerability in daloradius-users/login.php within daloRADIUS 0.9-8 and earlier. The issue arises because the application fails to sanitize user-supplied input passed to the login.php script’s error parameter before it is embedded in HTML output, enabl...

CVE-2009-4347: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2009-2163

Cross-site scripting XSS vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to inject arbitrary web script or HTML via the scerror parameter...

CVE-2009-1785: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter to header.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1445: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to 1 read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and 2 include and execute arbitrary local files via directory traversal sequences in the...

Cross site scripting

Cross-site scripting XSS vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4888: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-1848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the joomlaXplorer comjoomlaxplorer Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a showerror action to index.php...

CVE-2008-0838: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 error and 2 go parameters to the login page...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action...

CVE-2007-6232

Cross-site scripting XSS vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action...

CVE-2007-6232

Cross-site scripting XSS vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action...

CVE-2007-6232: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action...