CVE-2006-6910

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with Abfrage, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter...

CVE-2006-6075

Cross-site scripting XSS vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6075: Undefined Security Weakness

Cross-site scripting XSS vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

PT-2006-6644

Name of the Vulnerable Software and Affected Versions DirectAdmin version 1.28.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various parameters and commands, including the user parameter to CMD SHOW RESELLER or CMD...

PT-2006-6422 · Atutor · Atutor

Name of the Vulnerable Software and Affected Versions: ATutor version 1.5.3.2 Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via several parameters in different PHP files, including the section parameter in "documentation/common/frame toc.php" a...

CVE-2006-5775: Undefined Security Weakness

Cross-site scripting XSS vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inject arbitrary web script or HTML, possibly via the name parameter...

CVE-2006-5130: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 url, 3 title, and 4 about parameters in a forum post. NOTE: the provenance of this information is unknown; the detai...

CVE-2006-4949

Cross-site scripting XSS vulnerability in the Drupal 4.6 Site Profile Directory profilepages.module before 1.1.2.1 and the Drupal 4.7 Site Profile Directory profilepages.module before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack o...

CVE-2006-4856: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, or 3 url parameters; 4 certain content parameters in the preview method; or 5 the q parameter in a sitesearch.do...

CVE-2006-4190: Undefined Security Weakness

Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. dot dot in the name parameter for a modload operation...

CVE-2006-3900

Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2006-3900: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2006-3548

Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a 1 javascript URI or an external 2 http, 3 https, or 4 ftp URI in the url parameter in services/go.php a...

CVE-2006-3559: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete all shoutbox messages via the 1 name and 2 pesan parameters...

CVE-2006-3526

Multiple cross-site scripting XSS vulnerabilities in guestbook.php in Sport-slo Advanced Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 name and 2 form parameters...

CVE-2006-3526: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in guestbook.php in Sport-slo Advanced Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 name and 2 form parameters...

Horde < 3.0.11 / 3.1.2 Multiple Script XSS

The version of Horde installed on the remote host fails to validate input to the 'url' parameter of the 'services/go.php' script before using it in dynamically-generated content. An unauthenticated attacker may be able to leverage this issue to inject arbitrary HTML and script code into a user's...

CVE-2006-3035: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in addwords.php in MyScrapbook 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 comment parameters. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-2772

Cross-site scripting XSS vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, and 3 headline parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-2772: Undefined Security Weakness

Cross-site scripting XSS vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, and 3 headline parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third...