CVE-2008-6385

RevSense 1.0 (W3matter) is vulnerable to a cross-site scripting (XSS) flaw in index.php via the section parameter, caused by insufficient input sanitization. OpenVAS also documents an SQL injection vulnerability for RevSense <= 1.0, sharing the same root cause. Impact per sources includes pote...

CVE-2008-6386

Cross-site scripting XSS vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final allows remote attackers to inject arbitrary web script or HTML via the ranktitle parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6351

Summary (CVE-2008-6351) : A cross-site scripting (XSS) vulnerability affects TurnkeyForms Local Classifieds in the file listtest.php , exploitable via the r parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The provided documents do not specify affected versions...

CVE-2008-6343

Cross-site scripting XSS vulnerability in the TU-Clausthal ODIN tucodin extension 0.0.1, 0.1.0, 0.1.1, and 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...

CVE-2008-6299

CVE-2008-6299 : Joomla! 1.5.7 and earlier are affected by multiple XSS vulnerabilities . The issues allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) the title and description parameters to the com_weblinks module and (2) unspecified vectors i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid and 2 subcategoryid parameters...

CVE-2008-6278

Multiple cross-site scripting XSS vulnerabilities in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid and 2 subcategoryid parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in Libero 5.3 SP5, and possibly other versions before 5.5 SP1, allows remote attackers to inject arbitrary web script or HTML via the search term field...

CVE-2008-6267

Cross-site scripting XSS vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2008-6259

Cross-site scripting XSS vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in pagesUTF8/auftragallgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the 1 QUB and 2 Bez74 parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the user parameter to login.php or 2 the dbfield parameter to filter.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-6238

The CVE-2008-6238 entry describes a Cross-site Scripting (XSS) vulnerability in OpenEdit Digital Asset Management (DAM) prior to version 5.2014. The flaw resides in archive/savedqueries/savequeryfinish.html where an attacker can inject arbitrary web script or HTML via the name parameter. The issu...

CVE-2008-6238

Cross-site scripting XSS vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the 1 selmese and 2 selanno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-6212

Cross-site scripting XSS vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the 1 selmese and 2 selanno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...