CVE-2007-5480

CVE-2007-5480 concerns multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop. The affected components are the web interfaces handling user-supplied data: the msg.jsp endpoint (parameter: msg) and the tc/contents/home001.jsp page (parameter: contentid). The root cause is unva...

CVE-2007-5480: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...

HP-UX Security Patch : PHSS_30204

X OV ITO7.1X Msg/Act Linux Agent A.07.23 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26687; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_31006

X OV ITO7.1X Msg/Act Linux Agent A.07.25 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26719; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_29643

X OV ITO7.1X Msg/Act Linux Agent A.07.22 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26675; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_32099

X OV ITO7.1X Msg/Act Linux Agent A.07.28 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26736; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2007-4630: Undefined Security Weakness

Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 errors/rights.asp or 2 errors/transaction.asp, or 3 the name of a MIME type mimetype...

CVE-2007-3014: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 errors/rights.asp or 2 errors/transaction.asp, or 3 the name of a MIME type mimetype...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-3542

Removed by vendor...

CVE-2007-3542: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-2804: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 brand and 2 Msg parameters...

CVE-2007-2090

Cross-site scripting XSS vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-2090: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in JEx-Treme Einfacher Passworschutz allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-2013

Cross-site scripting XSS vulnerability in index.php in JEx-Treme Einfacher Passworschutz allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-2013: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in JEx-Treme Einfacher Passworschutz allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-0639: Undefined Security Weakness

Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via 1 a REMOTEADDR cookie or 2 a cookie specifying an element of the msg array with an error number in the first...

Cross site scripting

Cross-site scripting XSS vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...