6663 matches found
CVE-2012-3464
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' quote character...
CVE-2012-2960
Cross-site scripting XSS vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file...
CVE-2012-4058
Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...
CVE-2012-0678
CVE-2012-0678 is an XSS vulnerability in Apple Safari prior to 6.0 that can be triggered via feed:// URLs. Affected product: Safari on macOS; root cause is improper handling of feed:// links leading to script/HTML injection. Confirmed by Red Hat and OpenVAS entries referencing Safari
CVE-2012-2365
Cross-site scripting XSS vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php...
CVE-2012-2361
Cross-site scripting XSS vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the name field aka the service name to...
CVE-2012-2365
Cross-site scripting XSS vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php...
CVE-2012-2021
Multiple cross-site scripting XSS vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-4290
Multiple cross-site scripting XSS vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding...
CVE-2011-4282
Multiple cross-site scripting XSS vulnerabilities in the course-tags functionality in tag/coursetagsmore.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 sort or 2 show parameter...
CVE-2012-0283
Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...
CVE-2012-3382
Cross-site scripting XSS vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properl...
CVE-2012-3805
CVE-2012-3805 describes multiple XSS vulnerabilities in Kajona up to version 3.4.2, exploitable via numerous GET/POST parameters across modules (content, postacomment, index, admin login, user, pages, filemanager, downloads, etc.). The root cause is inadequate sanitisation in getAllPassedParams, ...
CVE-2011-4299
Cross-site scripting XSS vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment...
CVE-2012-2641
Zenphoto contains a cross-site scripting (XSS) vulnerability in versions 1.4.2.4 and earlier (Zenphoto before 1.4.3). The issue allows an attacker to trigger improper interaction with an unspecified library to execute arbitrary script in a victim’s browser. This is a client-side impact with poten...
CVE-2012-3837
Multiple cross-site scripting XSS vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 emailaddress, 3 password, 4 passwordverify, 5 firstname, 6 lastname, or 7 verificationcode...
CVE-2012-3835
Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...
CVE-2012-3835
Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...