CVE-2007-4831

Multiple cross-site scripting XSS vulnerabilities in accountsettings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the 1 avatar and 2 title parameters...

CVE-2007-4831: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in accountsettings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the 1 avatar and 2 title parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c...

CVE-2007-4530

Multiple cross-site scripting XSS vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HTML via 1 the errortext parameter to errorbox.html or 2 the oktitle parameter to okbox.html...

Multiple IRC NowPlaying scripts command injection

It's possible to inject IRC command thorugh unfiltered song titile...

CVE-2007-3743

Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a bookmark with a long title...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to inc/lib/screen.php or 2 the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is...

CVE-2007-4090: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to inc/lib/screen.php or 2 the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is...

CVE-2007-3975

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

CVE-2007-3975: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

Safari Bookmarks Buffer Overflow Vulnerability

Safari 3.0.2 522.13.1 OS Windows XP SP2 At processing title field, which consists more than 1024 bytes at addition in a bookmark there is a buffer overflow. html head...

Safari bufer overflow

Buffer overflow during creation of bookmark for the page with oversized title...

Apple Safari for Windows书签标题缓冲区溢出漏洞

Apple Safari是一款WEB浏览器。 Windows平台下的Apple Safari处理书签标题存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 处理书签的标题字段超过1024字节，可使Windows平台下的Apple Safari触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Apple Safari 3.0.2 Beta for Windows 目前没有解决方案提供： http://www.apple.com/safari/ html head...

CVE-2007-3376: Undefined Security Weakness

Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark...

CVE-2007-3269

Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...

CVE-2007-3269

Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...

CVE-2007-3269: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3195

Cross-site scripting XSS vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3195: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...