SPIP 跨站脚本漏洞

SPIP is an open-source software developed by SPIP for creating Internet websites. Versions of SPIP prior to 4.2.15 had a cross-site scripting vulnerability. This vulnerability stemmed from improper validation of JavaScript tags in HTML code, which could lead to cross-site scripting attacks...

EUVD-2005-3559

Malware in sbrugna...

Cross-site Scripting (XSS)

getformwork/formwork is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization due to the site title field allowing JavaScript tags, which can be used to attack all system members...

CVE-2005-3560

Zone Labs 1 ZoneAlarm Pro 6.0, 2 ZoneAlarm Internet Security Suite 6.0, 3 ZoneAlarm Anti-Virus 6.0, 4 ZoneAlarm Anti-Spyware 6.0 through 6.1, and 5 ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs"...