CVE-2010-2013

Cross-site scripting XSS vulnerability in cp/editemail.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2010-2013

Cross-site scripting XSS vulnerability in cp/editemail.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Bibliography Biblio module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the 1 content parameter in conjunction with a /admin/poll/add PATHINFO, the 2 meta parameter in...

CVE-2010-2003

The CVE-2010-2003 issue affects Advanced Poll 2.08, specifically the misc/get_admin.php script. A sanitation flaw in the mysql_host parameter enables cross-site scripting (XSS), allowing an attacker to inject arbitrary HTML/JavaScript into a victim’s browser. Exploitation details in HTBridge advi...

CVE-2010-0475

Cross-site scripting XSS vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter...

CVE-2009-4859

Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...

CVE-2009-4869

Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-4856

Cross-site scripting XSS vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from third party informati...

Cross site scripting

Cross-site scripting XSS vulnerability in search.cgi in Matt's Script Archive MSA Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1856

CVE-2010-1856 affects RepairShop2 (version 1.9.023 Trial). The vulnerability is a reflected XSS in index.php, exploitable when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary script/HTML via the prod parameter in the products.details action. The connected documents con...

CVE-2009-4852

CVE-2009-4852 (and related CVEs) describes multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle prior to 0.94.1. Public records consistently cite input vectors such as the sort parameter to index.php and other unspecified vectors, enabling remote attackers to inject arbitrary sc...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Basic Analysis and Security Engine BASE, possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/baseroleadmin.php, 2 admin/baseuseradmin.php, 3 baseconfcontents.php, 4...

CVE-2010-1724

Multiple cross-site scripting XSS vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 func parameter to index.php, or the 2 lang parameter to index.php, which is not properly handled by ZLanguage.php...

CVE-2010-1711

Cross-site scripting XSS vulnerability in cargafotoal.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter...

CVE-2010-1703

Multiple cross-site scripting XSS vulnerabilities in indexsearch.php in 2daybiz Polls aka Advanced Poll Script allow remote attackers to inject arbitrary web script or HTML via the 1 category parameter or 2 search field...

Cross site scripting

Cross-site scripting XSS vulnerability in cargafotoal.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter...

CVE-2010-1711

Cross-site scripting XSS vulnerability in cargafotoal.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter...