CVE-2013-7257

Codiad 2.0.7 is affected by CVE-2013-7257, a cross-site scripting (XSS) vulnerability in the Project Name field of the web IDE. The issue stems from improper handling of user‑supplied project name data, enabling remote attackers to inject arbitrary script/HTML and potentially view sensitive infor...

Cross site scripting

Cross-site scripting XSS vulnerability in the JsonBuilder implementation in ProjectForge before 5.3 allows remote authenticated users to inject arbitrary web script or HTML via an autocompletion string, related to web/core/JsonBuilder.java and web/wicket/autocompletion/PFAutoCompleteBehavior.java...

CVE-2013-5222

Multiple cross-site scripting XSS vulnerabilities in ESRI ArcGIS for Server 10.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in libraries/idnaconvert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2013-4414

Cross-site scripting XSS vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form...

Cross site scripting

Cross-site scripting XSS vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler...

CVE-2013-5406

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler...

CVE-2013-7002

LiveZilla 5.1.0.0 is vulnerable to a reflected XSS in mobile/php/translation/index.php via the g_language parameter. The issue allows remote attackers to inject arbitrary script/HTML and is classified with CVSS v2 base score 4.3 (I: Partial). A fix was released and the vulnerability is fixed in L...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer GRC 5.x before 5.4 SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6837

Cross-site scripting XSS vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATHINTO to the default URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540...

CVE-2013-6005

CVE-2013-6005 is an XSS vulnerability in Cybozu Dezie prior to 8.1.0. The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button, potentially triggering arbitrary script execution in a logged-in user’s browser. Affected products include Cyboz...

Cross site scripting

Cross-site scripting XSS vulnerability in the search implementation in IBM Rational Quality Manager RQM 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to...

CVE-2013-6224

Multiple cross-site scripting XSS vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 a name in the call administrator feature, 2 unspecified vectors to the admins visitor information panel, or 3 a text message in a chat session, which i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to 1 admin/hostdependencies.php, 2 admin/hosts.php, or other unspecified pages that allow search input, related to the search functionali...

CVE-2013-7025

CVE-2013-7025 describes multiple XSS vulnerabilities in ematStaticAlertTypes.jsp within the Alert Settings area of Dell SonicWALL Global Management System (GMS), SonicWALL Analyzer, and UMA EM5000 7.1 SP1 prior to Hotfix 134235. The underlying issue is reflected/stored XSS via the parameters valf...

CVE-2013-4171

Multiple cross-site scripting XSS vulnerabilities in Apache Roller before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the search results in the 1 RSS and 2 Atom feed templates...

CVE-2013-4492

CVE-2013-4492 describes a cross-site scripting (XSS) vulnerability in the Ruby i18n gem: an attacker can cause arbitrary script HTML injection via a crafted I18n::MissingTranslationData.new call. Affected software is the i18n gem for Ruby, prior to version 0.6.6. The root cause is improper handli...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 db parameter on the login page or 2 username parameter in a login.index action to index.php and other unspecified parameters...