Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2009-2020

Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 searchterm parameter to main/auth/courses.php; the 2 frmtitle and 3 frmcontent parameters in a new personal agenda item action; the 4...

CVE-2009-2006

Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 searchterm parameter to main/auth/courses.php; the 2 frmtitle and 3 frmcontent parameters in a new personal agenda item action; the 4...

CVE-2009-1951

Cross-site scripting XSS vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action...

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel...

Cross site scripting

Cross-site scripting XSS vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 model.php and 2 config.php with timestamps before 20090521...

CVE-2009-1881

CVE-2009-1881 pertains to MT312’s IMG-BBS web log system, where an XSS vulnerability exists in files related to model.php with a timestamp prior to May 21, 2009. The affected component is IMG-BBS (MT312). The vulnerability allows remote attackers to inject arbitrary script or HTML, potentially le...

CVE-2009-1845

Cross-site scripting XSS vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter...

CVE-2009-1844

Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...

CVE-2009-1844

CVE-2009-1844 affects Drupal 5.x (prior to 5.18) and 6.x (prior to 6.12). The issue comprises two XSS vectors: (1) remote authenticated users can inject script via UTF-8 byte sequences misinterpreted as UTF-7 in the HTML exports of books, and (2) remote authenticated users with administer taxonom...

CVE-2009-1820

Cross-site scripting XSS vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2009-1820

Cross-site scripting XSS vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2009-1820

CVE-2009-1820 describes a cross-site scripting (XSS) vulnerability in the 2daybiz Custom T-shirt Design Script, specifically in the file product.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter. The provided references confirm the vulnerability des...

CVE-2009-1809

CVE-2009-1809 affects myColex 1.4.2 with multiple XSS flaws. Reported vulnerabilities allow remote attackers to inject arbitrary script/HTML via (1) year parameter in modules/kalender.php, (2) Page parameter in a List action to modules/ereignis.php, (3) Kontext parameter in a Search action to mod...

CVE-2009-1801

Multiple cross-site scripting XSS vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to inject arbitrary web script or HTML via the 1 display parameter to reports.php, the 2 order and 3 extdisplay parameters to config.php, and the 4 so...

CVE-2009-1772

Cross-site scripting XSS vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via the reroute parameter to the login script...

CVE-2009-1749

Multiple cross-site scripting XSS vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 usermanform and 2 webpagesform parameters...

CVE-2009-1749

Multiple cross-site scripting XSS vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 usermanform and 2 webpagesform parameters...