551 matches found
CVE-2008-0131: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in loginform.asp in Instant Softwares Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different product than CVE-2006-6022. NOTE: the provenance of this information is unknown; the details are obtained sole...
CVE-2007-5629: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/logon.asp in ShoppingTree CandyPress Store 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different vector than CVE-2007-2804. NOTE: the provenance of this information is unknown; the details are obtained...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...
CVE-2007-5480
Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...
CVE-2007-5480
CVE-2007-5480 concerns multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop. The affected components are the web interfaces handling user-supplied data: the msg.jsp endpoint (parameter: msg) and the tc/contents/home001.jsp page (parameter: contentid). The root cause is unva...
CVE-2007-5480: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...
HP-UX Security Patch : PHSS_30204
X OV ITO7.1X Msg/Act Linux Agent A.07.23 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26687; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
HP-UX Security Patch : PHSS_31006
X OV ITO7.1X Msg/Act Linux Agent A.07.25 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26719; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
HP-UX Security Patch : PHSS_29643
X OV ITO7.1X Msg/Act Linux Agent A.07.22 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26675; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
HP-UX Security Patch : PHSS_32099
X OV ITO7.1X Msg/Act Linux Agent A.07.28 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26736; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2007-4630: Undefined Security Weakness
Cross-site scripting XSS vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 errors/rights.asp or 2 errors/transaction.asp, or 3 the name of a MIME type mimetype...
CVE-2007-3014: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 errors/rights.asp or 2 errors/transaction.asp, or 3 the name of a MIME type mimetype...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-3542
Removed by vendor...
CVE-2007-3542: Undefined Security Weakness
Cross-site scripting XSS vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-2804: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 brand and 2 Msg parameters...
CVE-2007-2090
Cross-site scripting XSS vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-2090: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...