CVE-2009-2965

Cross-site scripting XSS vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before SD 7.0.100, allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/comments.php in Gelato CMS 0.95 allows remote attackers to inject arbitrary web script or HTML via the content parameter in a comment. NOTE: some of these details are obtained from third party information...

CVE-2008-7039

CVE-2008-7039 concerns Gelato CMS 0.95, where an XSS flaw exists in admin/comments.php via the comment content parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML when processing a comment, per the NVD description. The linked connected records corroborate t...

Cross site scripting

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

CVE-2008-7018

Cross-site scripting XSS vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field descr parameter in an Add New Event action in an unspecified request as generated by an add action in index.php...

CVE-2008-7017

Cross-site scripting XSS vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928, allows remote attackers to inject arbitrary web script or HTML via the CN CommonName field in the subject of an X.509 certificate...

Cross site scripting

Cross-site scripting XSS vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field...

CVE-2009-2919

Cross-site scripting XSS vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2919

Boonex Orca 2.0 and 2.0.2 are affected by an XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via the topic title field. Affected component: Boonex Orca (versions 2.0, 2.0.2). Root cause details are not provided in the documents. No remediation or ex...

CVE-2009-2919

Cross-site scripting XSS vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field...

CVE-2009-2913

Cross-site scripting XSS vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2887

Cross-site scripting XSS vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter...

CVE-2009-2882

CVE-2009-2882 affects PG MatchMaking with multiple XSS flaws allowing remote injection via parameters: show on browse_ladies.php and browse_men.php; gender on search.php; id on services.php. These are documented as cross-site scripting vulnerabilities with a base CVSS v2 score of 4.3 (Medium). Th...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6988

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

CVE-2008-6982

Devalcms 1.4a contains a Cross-Site Scripting (XSS) vulnerability in the currentpath parameter of index.php. The nuclei template for CVE-2008-6982 confirms the affected software/version and impact: arbitrary JavaScript execution in the victim’s browser, which can lead to session hijacking or info...

CVE-2009-2780

Multiple cross-site scripting XSS vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to category.php, view parameter to 2 login.php and 3 viewlisting.php, page parameter to 4 searchresults.php and 5 toplistings.php, and 6...

CVE-2009-2780

CVE-2009-2780 affects 68 Classifieds 4.1. Multiple cross-site scripting (XSS) vulnerabilities exist that allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) cat in category.php, (2) view in login.php, (3) view in viewlisting.php, (4) page in searchresul...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to 1 quicksearch.php and 2 viewprofile.php...