CVE-2008-6211

The CVE-2008-6211 issue affects PhpForums.net mcGallery 1.1 and involves multiple XSS vulnerabilities. Arbitrary web script or HTML could be injected through the lang parameter to seven pages (admin.php, index.php, sess.php, stats.php, detail.php, resize.php, show.php). The root cause is reflecte...

CVE-2008-6211

Multiple cross-site scripting XSS vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to 1 admin.php, 2 index.php, 3 sess.php, 4 stats.php, 5 detail.php, 6 resize.php, and 7 show.php. NOTE: the provenance of this...

CVE-2008-6174

CVE-2008-6174 is an XSS vulnerability affecting Jetbox CMS 2.1, specifically in admin/postlister/index.php where the liste parameter can be exploited to inject arbitrary web script or HTML. The descriptions across NVD and related records confirm a cross-site scripting flaw without details on obse...

CVE-2005-4878

CVE-2005-4878 details: Multiple XSS vulnerabilities in ACID 0.9.6b20 (acid_qry_main.php) and BASE 1.2 (base_qry_main.php), plus unspecified consoles, allow remote injection via the sig[1] parameter and related inputs. Connected documents also flag a separate but related issue CVE-2007-6156 affect...

CVE-2009-0594

Cross-site scripting XSS vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-6144

CVE-2008-6144 (and related CVE-2008-3029) describe cross-site scripting (XSS) in the WEC Discussion Forum (wec_discussion) TYPO3 extension. Affected versions include 1.6.2 and earlier for TYPO3 (and 1.7.0 and earlier per the CVE-2008-6144 entry). The vulnerabilities allow remote attackers to inje...

CVE-2009-0594

CVE-2009-0594 affects phpSkelSite 1.4 in the file index.php, where a cross-site scripting (XSS) vulnerability exists that allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. This is the underlying cause noted in the description. The supplied documents do not specify ...

CVE-2009-0594

Cross-site scripting XSS vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-6127

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

Cross site scripting

Cross-site scripting XSS vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

Cross site scripting

Cross-site scripting XSS vulnerability in the sajaxgetcommonjs function in php/Sajax.php in Sajax 0.12 allows remote attackers to inject arbitrary web script or HTML via the URL parameter, which is not properly handled when using browsers that do not URL-encode requests, such as Internet Explorer...

CVE-2009-0533

Cross-site scripting XSS vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0525

CVE-2009-0525 concerns an XSS vulnerability in the sajax_get_common_js function of php/Sajax.php in Sajax 0.12. The issue arises when user-supplied input via the URL parameter is not properly handled, enabling remote attackers to inject arbitrary web script or HTML, particularly in browsers that ...

CVE-2009-0532

CVE-2009-0532 describes a Cross-Site Scripting (XSS) flaw in password.php of Scripts For Sites (SFS) EZ Baby. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially involving the u2 parameter. The NVD entry lists a base score of 4.3 (...

CVE-2008-6113

SemanticScuttle contains a cross-site scripting (XSS) vulnerability in versions before 0.90. The issue allows remote attackers to inject arbitrary web script or HTML, via vectors related to the username and profile page. The connected sources confirm the affected software and the impact (arbitrar...

CVE-2009-0500

CVE-2009-0500 is a Moodle XSS vulnerability in course/lib.php where crafted log table data displayed in a log report could inject script/HTML. Affected Moodle versions: 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4. Root cause is improper handling/escaping of log info...

CVE-2009-0487

CVE-2009-0487 concerns Mahara prior to 1.0.9. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted forum post. Multiple sources in connected documents corroborate that this is an XSS issue affecting Mahara versions befo...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to index.php/Special/Main/keywordSearch, 2 revNum parameter to index.php/Edit/Main/Home, 3 to parameter to...

CVE-2008-6096

Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...