Cross site scripting

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS...

CVE-2017-8920: Improper Neutralization of Input During Web Page Generation

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS...

CVE-2014-4849: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in msg.php in FoeCMS allow remote attackers to inject arbitrary web script or HTML via the 1 e or 2 r parameter...

CVE-2014-4851: Undefined Security Weakness

Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the r parameter...

CVE-2012-0981: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. dot dot in the r parameter to index.php. NOTE: Some of these details are obtained from third party information...

CVE-2010-4971

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

CVE-2010-4971: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the nonjs interface interfaces/nonjs.pm in CGI:IRC before 0.5.10 allows remote attackers to inject arbitrary web script or HTML via the R parameter...

CVE-2011-0050: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the nonjs interface interfaces/nonjs.pm in CGI:IRC before 0.5.10 allows remote attackers to inject arbitrary web script or HTML via the R parameter...

CVE-2008-6683: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject arbitrary web script or HTML via the r parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter...

CVE-2008-6529: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter...

CVE-2008-6351: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter...

CVE-2008-6350: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...

CVE-2008-3943: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter...

CVE-2008-3587: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter...

CVE-2008-3417: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561...

CVE-2008-1919: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...

CVE-2006-2127: Undefined Security Weakness

SQL injection vulnerability in weblogposting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL commands via the r parameter...