2861 matches found
CVE-2004-2115: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the 1 action, 2 username, or 3 password parameters in an isqlplus request...
CVE-2005-0785
Cross-site scripting XSS vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2005-1000
Multiple cross-site scripting XSS vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the bid parameter to the EmailStats op in banners.pgp, 2 the ratenum parameter in the TopRated and MostPopular actions in the WebLinks module, 3 the ttitle paramet...
CVE-2005-1146: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145...
PT-2005-2162 · Calendarscript · Calendarscript
Name of the Vulnerable Software and Affected Versions: CalendarScript version 3.21 Description: A cross-site scripting XSS issue exists in the login command of calendar.pl, allowing remote attackers to inject arbitrary web script or HTML via the username parameter. Recommendations: For...
CVE-2005-0785
Cross-site scripting XSS vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2005-0785: Undefined Security Weakness
Cross-site scripting XSS vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2005-0741
Cross-site scripting XSS vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action...
CVE-2005-0741: Undefined Security Weakness
Cross-site scripting XSS vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action...
CVE-2005-0741
Cross-site scripting XSS vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action...
YaBB < 2.1 YaBB.pl username Parameter XSS
Binary data 2685.prm...
CVE-2004-1645: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the 1 username parameter to test.x, 2 username parameter to TestServer.x, or 3 param parameter to testgetrequest.x...
PT-2005-1332 · Biborb · Biborb
Name of the Vulnerable Software and Affected Versions: BibORB versions 1.3.2 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the Username or Password variables. Recommendations: For BibORB versions 1.3.2 and earlier, update to...
CVE-2004-1401: Undefined Security Weakness
SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter...
Gallery: Cross-site scripting vulnerability
Background Gallery is a web application written in PHP which is used to organize and publish photo albums. It allows multiple users to build and maintain their own albums. It also supports the mirroring of images on other servers. Description Rafel Ivgi has discovered a cross-site scripting...
Gallery login.php username Parameter XSS
The version of Gallery hosted on the remote web server is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'username' parameter of the 'login.php' script. An attacker could exploit this flaw to inject arbitrary HTML and script code...
CVE-2004-2465
Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2004-1645
Cross-site scripting XSS vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the 1 username parameter to test.x, 2 username parameter to TestServer.x, or 3 param parameter to testgetrequest.x...
CVE-2002-2255
Cross-site scripting XSS vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the searchusername parameter in searchuser mode...