CVE-2009-3730

Multiple cross-site scripting XSS vulnerabilities in the ReqWeb Help feature aka the Web Client Help system in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the 2 searchWord, 3...

CVE-2009-3696

phpMyAdmin is affected by CVE-2009-3696 (XSS) for versions 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1. The root cause is an XSS vulnerability triggered by a crafted MySQL table name, allowing remote attackers to inject arbitrary scripts/HTML. Debian and SUSE advisories indicate patches: upgrad...

CVE-2009-3668

CVE-2009-3668 describes a cross-site scripting (XSS) vulnerability in Ardguest 1.8, specifically in the file ardguest.php where the page parameter可 allows remote attackers to inject arbitrary web script or HTML. The condition is input reflected to the user, enabling script execution in the victim...

Cross site scripting

Cross-site scripting XSS vulnerability in Dex 5.x-1.0 and earlier and 6.x-1.0-rc1 and earlier, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3598

Cross-site scripting XSS vulnerability in surveyresult.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2009-3540

Cross-site scripting XSS vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...

CVE-2009-3540

The CVE corresponds to a cross-site scripting (XSS) vulnerability in listads.php of YourFreeWorld Ultra Classifieds Pro, exploitable via the cn parameter to inject arbitrary script/HTML. The description notes remote exploit with no confirmed proof-of-exploit elsewhere in the provided documents. N...

CVE-2009-3512

The CVE-2009-3512 entry concerns MyWeight 1.0 with multiple XSS vulnerabilities . The affected vectors are the following parameters: (1) date in user_addfood.php, (2) info in user_forgot_pwd_form.php, (3) info in user_login.php, and (4) return in user_login.php. The underlying issue is that these...

CVE-2009-3485

Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI...

CVE-2009-3420

Multiple cross-site scripting XSS vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter and the 2 PATHINFO...

CVE-2009-3427

The CVE-2009-3427 issue affects Kayako SupportSuite, specifically version 3.50.06, which is vulnerable to a cross-site scripting (XSS) flaw in the ticket subject field. The underlying problem is insufficient sanitization of input passed to the subject field, allowing an attacker to inject arbitra...

Cross site scripting

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...

CVE-2009-3355

Cross-site scripting XSS vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the sr parameter...

CVE-2009-3328

Cross-site scripting XSS vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrary web script or HTML via the sName parameter aka the name field. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-3283

Cross-site scripting XSS vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHPRSSBuilder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies...

CVE-2009-3283

Cross-site scripting XSS vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHPRSSBuilder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies...

Cross site scripting

Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...

CVE-2009-3262

Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...