CVE-2014-1944: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry...

PT-2014-4376

Name of the Vulnerable Software and Affected Versions Ilch CMS versions 2.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the text parameter to "index.php/guestbook/index/newentry". Recommendations For Ilch CMS versions 2.0...

UBUNTU-CVE-2014-2244

Cross-site scripting XSS vulnerability in the formatHTML function in includes/api/ApiFormatBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 allows remote attackers to inject arbitrary web script or HTML via a crafted string located after http:// in t...

CVE-2014-2244

Cross-site scripting XSS vulnerability in the formatHTML function in includes/api/ApiFormatBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 allows remote attackers to inject arbitrary web script or HTML via a crafted string located after http:// in t...

PT-2014-4580

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.19.12 MediaWiki versions 1.20.x MediaWiki versions 1.21.x prior to 1.21.6 MediaWiki versions 1.22.x prior to 1.22.3 Description A cross-site scripting XSS issue exists due to a vulnerability in the formatHTML...

CVE-2014-2244: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the formatHTML function in includes/api/ApiFormatBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 allows remote attackers to inject arbitrary web script or HTML via a crafted string located after http:// in t...

PT-2012-3781

Name of the Vulnerable Software and Affected Versions CKEditor module versions prior to 6.x-2.3 CKEditor module versions prior to 6.x-1.9 CKEditor module versions prior to 7.x-1.7 Description The issue allows remote authenticated users or remote attackers to execute arbitrary PHP code via the tex...

CVE-2012-2067

Unspecified vulnerability in the CKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal, when the core PHP module is enabled, allows remote authenticated users or remote attackers to execute arbitrary PHP code via the text...

CVE-2012-2941

Cross-site scripting XSS vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2012-2941: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter...

PT-2012-4382

Name of the Vulnerable Software and Affected Versions Yandex.Server 2010 version 9.0 Enterprise Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the text parameter in the search functionality. Recommendatio...

UBUNTU-CVE-2011-5025

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

CVE-2011-4565: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to include/formdhtmltextareapreview.php or 2 img BBCODE tag within the message parameter to pmlite.php aka...

PT-2011-4993

Name of the Vulnerable Software and Affected Versions XOOPS versions prior to 2.5.1.a Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the text parameter to "include/formdhtmltextarea preview.php" or the img BBCODE tag within the messa...

Buffer overflow

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long text1 parameter...

CVE-2009-4266: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in YABSoft Advanced Image Hosting AIH Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2009-2438

Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...

CVE-2009-2438: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...

CVE-2008-4557

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 aka Strawberry allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression...

CVE-2008-4557: Improper Control of Generation of Code

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 aka Strawberry allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression...