CVE-2008-6772

The CVE affects YourPlace 1.0.2 and earlier where login/register_form.php does not verify that a username already exists during account creation, allowing a remote attacker to bypass access restrictions by registering a new account with a target user’s username. Documented impact is a Partial con...

Unfixed XSS vulnerability at www.student.se

Security researcher Uber0n, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting www.student.se, which at the time of submission ranked 81299 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

CVE-2006-5457

Multiple cross-site scripting XSS vulnerabilities in the registration form in Casinosoft Casino Script Masvet 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 surname field...

CVE-2006-5457

Casinosoft Casino Script (Masvet) 3.2 contains multiple XSS vulnerabilities in its registration form, exploitable via the name or surname fields to inject arbitrary script/HTML. Remote exploitation is described; impact is limited to partial integrity and client-side exposure per the CVSS metrics ...

CVE-2006-5457

Multiple cross-site scripting XSS vulnerabilities in the registration form in Casinosoft Casino Script Masvet 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 surname field...

CVE-2006-2305

Multiple cross-site scripting XSS vulnerabilities in Jadu CMS allow remote attackers to inject arbitrary web script or HTML via the 1 forename, 2 surname, 3 regemail, 4 emailconf, 5 company, 6 city, 7 postcode, or 8 telephone parameters to site/scripts/register.php. NOTE: the provenance of this...

CVE-2006-2305

Multiple cross-site scripting XSS vulnerabilities in Jadu CMS allow remote attackers to inject arbitrary web script or HTML via the 1 forename, 2 surname, 3 regemail, 4 emailconf, 5 company, 6 city, 7 postcode, or 8 telephone parameters to site/scripts/register.php. NOTE: the provenance of this...

ASPThai90.txt

I MurderSkillz from g00ns.net have found xss vulnerabilities in ASPThai.net Forums alert'document.cookie'; ----------- /forum/searchform.asp ?FID=0&KW="alert'document.cookie';&SI=AR&FM=1&TID=934&PN=0&TPN=1...

CVE-2006-0811

Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...

Cross site scripting

Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...

CVE-2006-0811

Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...

Cross site scripting

Cross-site scripting XSS vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter...

CVE-2006-0689

Cross-site scripting XSS vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter...

CVE-2006-0689

CVE-2006-0689 affects TTS Software’s Time Tracking Software (Version 3.0). The vulnerability is a Cross-site Scripting (XSS) flaw in the Registration Form: the UserName parameter is not properly sanitized, allowing remote attackers to inject arbitrary script/HTML. Public disclosures in NVD and re...

Expinion.net Member Management System 2.1 - 'register.asp?err' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate...

XSS vulnerabilities in register.asp in Alan Ward Acart

Vulnerability: XSS vulnerabilities in register.asp Description: The registration form in register.asp does not properly sanitize user input. This means a malicious user can place script into the form fields when they register. The script is stored in the database intact and is called and executed...

CVE-2001-0527

DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols | and newlines into the last name in the registration form, which will create an extra entry in the registration database...

PHP-Nuke 5.0 - user.php Form Element Substitution

PHP-Nuke 5.0 - user.php Form Element Substitution source: https://www.securityfocus.com/bid/3107/info PHP-Nuke is a website creation/maintenance tool written in PHP3. If a malicious user may subtitute arbitrary values for image form elements in the PHP-Nuke User Registration Form by saving the...