64 matches found
CVE-2010-4555
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 drop-down selection lists, 2 the greater than character in the SquirrelSpell spellchecking plugin, and 3 errors associated wit...
CVE-2008-6503
Multiple cross-site scripting XSS vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/login.php and 2 order.php...
Unfixed XSS vulnerability at www.dubai-hosting.com
Security researcher TreX, has submitted on 22/02/2008 a cross-site-scripting XSS vulnerability affecting www.dubai-hosting.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is currently...
PT-2000-1089 · Make A Store · Make-A-Store Orderpage
Name of the Vulnerable Software and Affected Versions: Make-a-Store OrderPage affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no...