39 matches found
CVE-2005-4682: Undefined Security Weakness
Cross-site scripting XSS vulnerability in error.asp in AudienceView allows remote attackers to inject arbitrary web script or HTML via the TSerrorMessage parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-3422
The CVE-2005-3422 entry describes a Cross-site Scripting (XSS) vulnerability in ASP Fast Forum’s error.asp, exploitable by remote attackers via the error parameter to inject arbitrary scripts/HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium), with attack vector Network, authenticatio...
CVE-2005-3422: Undefined Security Weakness
Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2005-2077
CVE-2005-2077 corresponds to a cross-site scripting (XSS) vulnerability in Hosting Controller’s error.asp, exploitable via the error parameter. The associated connected data confirms the affected product is Hosting Controller, with error.asp being the vulnerable component and the root cause being...
CVE-2005-2077: Undefined Security Weakness
Cross-site scripting XSS vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter...
Hosting Controller 6.1 - error.asp Cross-Site Scripting
Hosting Controller 6.1 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/14080/info Hosting Controller is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'error.asp' script. A...
Hosting Controller 6.1 - 'error.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14080/info Hosting Controller is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'error.asp' script. An attacker may leverage this issue to have arbitrary...
CVE-2004-1844: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the err parameter to error.asp or 2 register.asp...
CVE-2005-1292
Multiple cross-site scripting XSS vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to 1 tellAFriend.asp or 2 addToWishlist.asp, redirect parameter to 3 access.asp or 4 login.asp, message parameter to 5 login.asp or 6...
CVE-2005-1292
Multiple cross-site scripting XSS vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to 1 tellAFriend.asp or 2 addToWishlist.asp, redirect parameter to 3 access.asp or 4 login.asp, message parameter to 5 login.asp or 6...
CartWIZ 1.10 - error.asp Cross-Site Scripting
CartWIZ 1.10 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/13339/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Expinion.net Member Management System 2.1 - 'error.asp?err' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate...
Expinion.net Member Management System 2.1 - error.asp?err Cross-Site Scripting
Expinion.net Member Management System 2.1 - error.asp?err Cross-Site Scripting source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure...
CVE-2004-0305: Undefined Security Weakness
Cross-site scripting XSS vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Messageid parameter...
IdealBB 1.4.9 - error.asp Cross-Site Scripting
IdealBB 1.4.9 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/8360/info IdealBB error.asp page has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the error.asp...
IdealBB 1.4.9 - 'error.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/8360/info IdealBB error.asp page has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the error.asp script on user-influenced URI parameters. This...
CVE-2002-0205
Cross-site scripting CSS vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter...
CVE-2002-0205
Cross-site scripting CSS vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter...
CVE-2002-0205: Undefined Security Weakness
Cross-site scripting CSS vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter...