CVE-2006-0493

Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...

CVE-2006-0493

Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...

CVE-2006-0241

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2006-0241

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

XSS in WBNews < = v1.1.0

it is possible to be executed I cosay arbitrary within the system wbnews in the field "Name" for example scriptalert"Hello DragoN";/script WBNews http://www.webmobo.com/ DragoN [email protected]...

CVE-2006-0124

Cross-site scripting XSS vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field...

CVE-2005-2460

Multiple cross-site scripting XSS vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter or 2 name field when entering a session or sending a message...

CVE-2005-1801

The vCard viewer in Nokia 9500 allows attackers to cause a denial of service crash via a vCard with a long Name field, which causes the crash when the user views it...

CVE-2005-1684

The CVE-2005-1684 entry concerns Episodex Guestbook (ASP) where the default.asp input validation flaw enables cross-site scripting via the Name field (and other fields). Multiple connected sources (OpenVAS/Nessus/NVD) confirm: remote, unauthenticated attackers can inject arbitrary HTML/script and...

CVE-2005-1684

Cross-site scripting XSS vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTML via the Name field and other fields...

CVE-2005-1605

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...

CVE-2004-1867

Cross-site scripting XSS vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2004-1867

Technical details are not publicly available in the provided documents; monitor for updates.

ACS Blog 0.80.91.01.1 - Name HTML Injection

ACS Blog 0.80.91.01.1 - Name HTML Injection source: https://www.securityfocus.com/bid/12921/info ACS Blog is affected by an HTML injection vulnerability. The issue affects the 'Name' field and may be exploited to execute arbitrary HTML and script code in the browser of the user when the user view...

ACS Blog 0.8/0.9/1.0/1.1 - 'Name' HTML Injection

source: https://www.securityfocus.com/bid/12921/info ACS Blog is affected by an HTML injection vulnerability. The issue affects the 'Name' field and may be exploited to execute arbitrary HTML and script code in the browser of the user when the user views an affected Web page. Name:...

PT-2004-3034 · Allwebscripts · Allwebscripts Mysqlguest

Name of the Vulnerable Software and Affected Versions: AllWebScripts MySQLGuest affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary HTML and PHP code via the Name, Email, Homepage, or...

CVE-2003-0479

Cross-site scripting XSS vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the 1 Name, 2 Email, or 3 Message fields...

CVE-2002-0807

Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name real name field, which is not properly quoted by editusers.cgi...

PT-2002-1753 · Myguestbook · Myguestbook

Name of the Vulnerable Software and Affected Versions: MyGuestbook version 1.0 Description: A cross-site scripting issue allows remote attackers to execute arbitrary script or inject HTML via fields such as user name or comments. Recommendations: For MyGuestbook version 1.0, consider validating a...