CVE-2005-2560: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2004-2245

Goollery is affected by multiple XSS in viewalbum.php (via the page parameter) and viewpic.php (via the btopage parameter). The CVE entry documents a reflected XSS vulnerability in Goollery 0.03 that allows remote attackers to inject arbitrary HTML/JS in a user’s browser. OpenVAS/Nessus entries c...

CVE-2004-2245: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the 1 page parameter to viewalbum.php or 2 btopage parameter to viewpic.php...

CVE-2005-1440

Multiple cross-site scripting XSS vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 various parameters to basket.php, 2 the nickname, email, topic, and message fields in forum.php, as demonstrated using forumnewthread.php and...

CVE-2005-0412

Cross-site scripting XSS vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page parameter...

CVE-2005-1095

Cross-site scripting XSS vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2005-1095: Undefined Security Weakness

Cross-site scripting XSS vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2005-0933: Undefined Security Weakness

Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter...

CVE-2005-0793: Undefined Security Weakness

PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to 1 execute arbitrary PHP code in ZPanel 2.0 or 2 include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter...

CVE-2005-0792

SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter to index.php or 2 page parameter to zpanel.php...

CVE-2005-0660: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3...

CVE-2005-0412: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page parameter...

CVE-2005-0283: Undefined Security Weakness

Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. dot dot and a %00 at the end of the filename in the page parameter...

CVE-2004-0678

Cross-site scripting XSS in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter...

CVE-2004-0734: Undefined Security Weakness

WebStore.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...

CVE-2004-0678: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter...

CVE-2003-0763

CVE-2003-0763 describes a Cross-site scripting (XSS) vulnerability in the Escapade Scripting Engine (ESP). The issue arises from unsanitized input in the method parameter (demonstrated via the PAGE parameter), enabling remote attackers to inject arbitrary script. Documents indicate the affected c...

CVE-2003-0763: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Escapade Scripting Engine ESP allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter...

CVE-2003-0764: Undefined Security Weakness

Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...

CVE-2002-1559: Undefined Security Weakness

Directory traversal vulnerability in ion-p.exe aka ion-p allows remote attackers to read arbitrary files via 1 C: drive letter or 2 .. dot-dot sequences in the page parameter...