CVE-2012-2536

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

CVE-2012-1892: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."...

CVE-2012-4892

CVE-2012-4892 describes multiple XSS vulnerabilities in FlatnuX CMS 2012-03.08 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) body_en parameters in a submitnews action to the news module, and are noted as a differ...

CVE-2012-0746

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote authenticated users to inject...

CVE-2012-1582

Cross-site scripting XSS vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension...

Drupal Exposed Filter Data 模块跨站脚本漏洞

Bugtraq ID:55423 Drupal是一款开源CMS，可以作为各种网站的内容管理平台。 Drupal Exposed Filter Data模块存在跨站脚本漏洞，允许攻击者通过未明参数注入任意WEB脚本或HTML，可导致敏感信息泄露或劫持用户会话。 0 Drupal Exposed Filter Data Module 6.x-1.x 厂商解决方案 Drupal Exposed Filter Data Module 6.x-1.2已经修复此漏洞，建议用户下载使用： http://drupal.org/node/1774636...

CVE-2012-3255: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Business Availability Center BAC 8.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1469

CVE-2012-1469 corresponds to multiple XSS vulnerabilities in Open Journal Systems (OJS) up to version 2.3.6, affecting the iBrowser component (lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/ibrowser.php) and input fields (editor/callback, authors[][url], Bio Statement, Abstract of Submiss...

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0820...

CVE-2012-1110

Multiple cross-site scripting XSS vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user, 2 email, 3 email2, 4 f17zip, or 5 agree parameter to join.php; 6 PATHINFO, 7 st, 8 f17city, 9 f17country, 10 f17state, 11 f17zip, 12 f19, 13...

CVE-2012-1110

CVE-2012-1110 describes multiple cross-site scripting (XSS) flaws in Etano 1.22 and earlier. The vulnerabilities affect the web application via a large set of input points: join.php parameters (user, email, email2, f17_zip, agree); search.php parameters (PATH_INFO, st, f17_city, f17_country, f17_...

CVE-2012-4870

Multiple cross-site scripting XSS vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 context parameter to panel/indexamp.php or 2 panel/dhtml/index.php; 3 clid or 4 clidname parameters to panel/flash/mypage.php; 5 PATHINFO to...

CVE-2012-0822: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0820...

Cross site scripting

Cross-site scripting XSS vulnerability in crowbarframework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly 1.4 and earlier, allows remote attackers to inject arbitrary web script or HTML via the file parameter to /utils...

CVE-2012-4395

Cross-site scripting XSS vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirecturl parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4396: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 file names to apps/userldap/settings.php; 2 url or 3 title parameter to apps/bookmarks/ajax/editBookmark.php; 4 tag or 5 page parameter to...

PT-2012-5370

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters in different ownCloud components. This includes file names, url, title, tag, page, identity, stack nam...

PT-2012-4790

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.5.x through 4.5.18 TYPO3 versions 4.6.x through 4.6.11 TYPO3 versions 4.7.x through 4.7.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations F...