6663 matches found
CVE-2010-0804
Cross-site scripting XSS vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter in a products action...
CVE-2010-0804
CVE-2010-0804 : The vulnerability is a cross-site scripting (XSS) flaw in the iBoutique 4.0 application, specifically in index.php. The issue arises when a crafted value is supplied to the key parameter in a products action, allowing remote attackers to inject arbitrary web script or HTML. The af...
Cross site scripting
Cross-site scripting XSS vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary web script or HTML via the reloadFrame parameter...
CVE-2010-0699
Cross-site scripting XSS vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2010-0675
CVE-2010-0675 affects BGSvetionik BGS CMS 2.2.1. The vulnerability is a Cross-site Scripting (XSS) in index.php that allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. Root cause is insufficient sanitization/validation of the search paramet...
CVE-2010-0675
Cross-site scripting XSS vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: some of these details are obtained from third party information...
CVE-2010-0615
EvalSMSI 2.1.03 contains a Cross‑Site Scripting (XSS) vulnerability in assess.php, exploitable via the reports comment box in the continue_assess action. The issue allows injection of arbitrary web script/HTML. Details indicate a client-side impact with potential partial integrity impact, and the...
Cross site scripting
Cross-site scripting XSS vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage SMH before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter...
CVE-2010-0460
Multiple cross-site scripting XSS vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the 1 subject parameter and 2 contents parameter aka body in an insertquestion action. NOTE: some of these...
CVE-2010-0455
Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the 1 subject parameter and 2 contents parameter aka body in an insertquestion action. NOTE: some of these...
CVE-2010-0460
Multiple cross-site scripting XSS vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the 1 subject parameter and 2 contents parameter aka body in an insertquestion action. NOTE: some of these...
Cross site scripting
Cross-site scripting XSS vulnerability in the Marketplace commarketplace component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a showcategory action to index.php...
CVE-2010-0371
Affected software: Hitmaaan Gallery 1.3 (vulnerability in index.php). The flaw enables cross-site scripting (XSS) via the gall and levela parameters, allowing remote attackers to inject arbitrary web script or HTML. The NVD notes a medium base score (4.3, CVSS2) with no authentication needed and ...
Cross site scripting
Cross-site scripting XSS vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2002-1785...
CVE-2010-0328
Cross-site scripting XSS vulnerability in the Unit Converter cs2unitconv extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-0319
Cross-site scripting XSS vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...