262 matches found
CVE-2011-5199
Cross-site scripting XSS vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2011-5199: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2011-5201: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the 1 name and 2 msg parameters. NOTE: some of these details are obtained from third party information...
PT-2012-2176
Name of the Vulnerable Software and Affected Versions tinyguestbook affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the msg parameter in the "sign.php" file...
CVE-2012-1835
Multiple cross-site scripting XSS vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to app/view/agenda-widget-form.php; 2 args, 3 title, 4 beforetitle, or 5 aftertitle parameter...
PT-2012-3000
Name of the Vulnerable Software and Affected Versions ZENphoto version 1.4.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the msg parameter in an external action to "zp-core/admin.php", PATH INFO to "zp-core/admin.php", or the albu...
Symantec Endpoint Protection Manager TestConnection.jsp 'Msg' Parameter XSS (SYM11-009 & SYM12-001)
The version of Symantec Endpoint Protection Manager running on the remote web server is affected by a cross-site scripting XSS vulnerability due to improper sanitization of input to the 'Msg' parameter in the TestConnection.jsp file. An unauthenticated, remote attacker can exploit this...
CVE-2009-4885: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/1/login.php in phpCommunity 2 2.1.8 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2010-2144: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4320: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding TNG 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2009-4234: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in loginpages/erroruser.shtml on the Micronet Network Access Controller SP1910 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2009-3222: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in FreeWebScriptz Honest Traffic FWSHT 1.x allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-6876
Cross-site scripting XSS vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037...
CVE-2008-6876: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037...
CVE-2009-2589: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...
CVE-2009-2588: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...
CVE-2009-2581: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-6868: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037...
CVE-2008-6847: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...