CVE-2006-0070

Drupal allows remote attackers to conduct cross-site scripting XSS attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when "Filtere...

CVE-2006-0070

CVE-2006-0070 affects Drupal. The issue is a cross-site scripting (XSS) vector via an IMG tag containing an unusual encoded Javascript function name, demonstrated with variations of the alert() function. The connected sources confirm affected Drupal versions prior to 4.5.6 and prior to 4.6.4 when...

CVE-2006-0070: Undefined Security Weakness

Drupal allows remote attackers to conduct cross-site scripting XSS attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when "Filtere...

drupal all versiyon xss

Drupal all versiyon xss ---------------------------------------------------- site:http://www.drupal.org Hex, Base64, Decimal site: http://liz0zim.no-ip.org/code.php -------------------------------------------------- img tag : on...

CVE-2005-4644

Cross-site scripting XSS vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

DEBIAN-CVE-2005-4644

Cross-site scripting XSS vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

CVE-2005-4516

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

CVE-2005-4516

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection

source: https://www.securityfocus.com/bid/16300/info Phpclanwebsite is prone to a script-injection vulnerability. An attacker can nest BBCode IMG tags to trigger this issue and execute arbitrary code in a user's browser. Attacker-supplied HTML and script code would be able to access properties of...

CVE-2005-4516: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection

Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection source: https://www.securityfocus.com/bid/16300/info Phpclanwebsite is prone to a script-injection vulnerability. An attacker can nest BBCode IMG tags to trigger this issue and execute arbitrary code in a user's browser. Attacker-supplied HT...

CVE-2005-4450

Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to serverprivileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of this issue is unknown,...

CVE-2005-4022: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2004-2625

Cross-site scripting XSS vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag...

CVE-2004-2625

CVE-2004-2625 describes a cross-site scripting (XSS) vulnerability in Outblaze Email. The issue arises when an attacker injects arbitrary web script or HTML through Javascript in an attribute of an IMG tag, enabling remote attackers to execute code in victims’ browsers. The connected documents pr...

CVE-2004-2625: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag...

CVE-2003-1278

Cross-site scripting vulnerability XSS in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into IMG tags...

CVE-2003-1278: Undefined Security Weakness

Cross-site scripting vulnerability XSS in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into IMG tags...

zoomblogJS.txt

DETAILS Zoomblog is prone to javascript injection attacks. Zoomblog does not adequately filter tags from various fields. It is possible for a malicious Zoomblog user to inject hostile javascript code into the commentary via form fields. This code may be rendered in the browser of a web user who...

Zoomblog <IMG> BBCode Tag JavaScript Injection Vulnerability

DETAILS Zoomblog is prone to javascript injection attacks. Zoomblog does not adequately filter img tags from various fields. It is possible for a malicious Zoomblog user to inject hostile javascript code into the commentary via form fields. This code may be rendered in the browser of a web user w...