CVE-2012-1899

Multiple cross-site scripting XSS vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 First name, 2 Last name or 3 Email required fields...

CVE-2012-1899: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 First name, 2 Last name or 3 Email required fields...

XWiki Watch Multiple Cross Site Scripting Vulnerabilities

This host is running XWiki Watch and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbxwikiwatchmultxssvuln.nasl 7276 2017-09-26 11:59:52Z cfischer $ XWiki Watch Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c...

CVE-2009-4939

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities

Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...

CiviCRM 3.1 Beta 5 - Multiple Cross-Site Scripting Vulnerabilities

CiviCRM 3.1 Beta 5 - Multiple Cross-Site Scripting Vulnerabilities Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the 1 First Name, 2 Last Nam...

CVE-2007-0768

Multiple cross-site scripting XSS vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the 1 First Name, 2 Last Nam...

CVE-2006-3568

Multiple cross-site scripting XSS vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, or 3 nickname parameters...

PT-2006-4443 · Unknown · Fantastic Guestbook

Name of the Vulnerable Software and Affected Versions: Fantastic Guestbook versions 2.0.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the first name, last name, or nickname parameters in the guestbook.php file. Recommendations: For Fantast...

CVE-2005-4057: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Location, 2 Last Name, and 3 First Name parameters...

CVE-2005-3433: Undefined Security Weakness

Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing a user to enter long strings into the First Name and Last Name fields...

CVE-2005-1104

Multiple cross-site scripting XSS vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 first name, or 3 last name fields...

CVE-2005-1104

Multiple cross-site scripting XSS vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 first name, or 3 last name fields...

CVE-2005-1104: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 first name, or 3 last name fields...