CVE-2006-0472: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php in my little homepage my little guestbook, as last modified in March 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...

EasyCMS vulnerable to XSS injection.

The Norwegian web-publishing system EasyCMS www.easycms.no contains multiple input flaws letting users conduct successful XSS attacks. Both in the admin section, and the webpage that uses the system is vulnerable to XSS. It does not filter script tags and simple scripting like...

CVE-2005-4665: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags...

Ubuntu 4.10 : libexif vulnerabilities (USN-91-1)

Sylvain Defresne discovered that the EXIF library did not properly validate the structure of the EXIF tags. By tricking a user to load an image with a malicious EXIF tag, an attacker could exploit this to crash the process using the library, or even execute arbitrary code with the privileges of t...

CVE-2006-0180

CaLogic Calendars 1.2.2 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via the Title field on the "Adding New Event" page, and possibly other vectors involving iframe tags. The affected component is the calendar input handling in C...

Cross site scripting

Cross-site scripting XSS vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags...

CVE-2006-0180

Cross-site scripting XSS vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags...

CVE-2006-0180: Undefined Security Weakness

Cross-site scripting XSS vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags...

CVE-2006-0156

Cross-site scripting XSS vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in 1 addpost1.php and 2 addtopic1.php...

CVE-2006-0156

Cross-site scripting XSS vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in 1 addpost1.php and 2 addtopic1.php...

Html_Injection in vBulletin 3.5.2

Vulnerable Version: 3.5.2 prior versions also may be affected Bug: HtmlInjection Second order CrossSiteScripting Exploitation: Remote with browser HtmlInjection : The software does not properly filter HTML tags in the title of events before being passed to user in 'calendar.php'&'reminder.php AS...

CVE-2006-0156: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in 1 addpost1.php and 2 addtopic1.php...

CVE-2006-0140: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in post.php in NavBoard V16 Stable2.6.0 and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the 1 b, 2 textlarge, and 3 url bbcode tags...

CVE-2006-0063: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary web script or HTML via a permitted HTML tag with ' single quote characters and active attributes such as onmouseover, a variant of CVE-2005-4357...

CVE-2005-4665

Cross-site scripting XSS vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags...

CVE-2005-4588

Cross-site scripting XSS vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4588

The CVE-2005-4588 entry describes a Cross-site scripting (XSS) vulnerability in Koobi 5. The issue arises when parsing nested, malformed URL BBCode tags, enabling remote attackers to inject arbitrary web script or HTML into the affected application. The sources indicate the vulnerability is in Ko...

CVE-2005-4588: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4516

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

CVE-2005-4516

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...