CVE-2012-1000: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 message parameter to admins/login/forgot/index.php, or the 2 displayname or 3 email parameter to account/preferences.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the 1 visitorlanguage parameter to register.php or 2 message parameter...

CVE-2012-1027: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in account-closed.tcl in project-open aka po 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed...

CVE-2012-0932: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2011-4567: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/templates/templatedefault/templates/tplgvsenddefault.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gvsend action to index.php, a different vulnerability than CVE-2011-4547...

CVE-2010-5054: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2009-4939

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

CVE-2010-2355

The CVE-2010-2355 entry describes a Cross-site scripting (XSS) vulnerability in error.php of Pilot Group (PG) eLMS Pro. The flaw allows remote attackers to inject arbitrary web script or HTML via the message parameter, potentially affecting any user who views the compromised page. The NVD details...

CVE-2010-2355: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in error.php in Pilot Group PG eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4890: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the 1 title and 2 message parameters...

CVE-2010-1712: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and possibly 2 message parameters. NOTE: some of these details are obtained from third party information...

CVE-2010-0706

Cross-site scripting XSS vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2010-0706

Cross-site scripting XSS vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2010-0706: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

PT-2009-5538 · Freewebscriptz · Freewebscriptz Honest Traffic

Name of the Vulnerable Software and Affected Versions: FreeWebScriptz Honest Traffic FWSHT versions 1.x Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the msg parameter in the...

CVE-2009-3060

Multiple cross-site scripting XSS vulnerabilities in Joker Board aka JBoard 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the notice parameter to editform.php, 2 the editusermessage parameter to core/editusermessage.php, or 3 the usertitle parameter to...

CVE-2008-7134: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 file parameter, 2 message parameter in a login action, 3 category parameter in a browse action, 4 now...

CVE-2008-6977: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action...

CVE-2008-6890

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the messageid parameter...

CVE-2008-6764: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter...