6663 matches found
CVE-2008-5202
CVE-2008-5202 describes an XSS vulnerability in OTManager CMS 24a, where the parameter conteudo in index.php is not properly sanitized. This allows remote attackers to inject arbitrary web script or HTML, potentially compromising the victim’s browser session. Affected product: OTManager CMS 24a (...
CVE-2008-5164
Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...
CVE-2008-5164
Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...
CVE-2008-5126
The CVE-2008-5126 entry concerns BoutikOne CMS, where the vulnerability is in the file search.php and is triggered via the search_query parameter. The issue is a Cross-site Scripting (XSS) vulnerability that permits remote attackers to inject arbitrary web script or HTML. The publicly provided de...
CVE-2008-5126
Cross-site scripting XSS vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
CVE-2008-5119
Cross-site scripting XSS vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2008-5067
Cross-site scripting XSS vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in php/caldefault.php in Mini Web Calendar mwcal 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL...
CVE-2008-5056
CVE-2008-5056 affects ActiveCampaign TrioLive before 1.58.7. The issue is a cross-site scripting (XSS) vulnerability in department_offline_context.php, exploitable via the department_id parameter to index.php. This allows remote attackers to inject arbitrary web script or HTML. The NVD entry list...
CVE-2008-5061
CVE-2008-5061 is a Cross-site Scripting (XSS) vulnerability in Mini Web Calendar (mwcal) 1.2, specifically in php/cal_default.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, impacting only the client-side confidentiality/integrity depending on the context...
CVE-2008-5043
Multiple cross-site scripting XSS vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via 1 the elementid parameter in a generatedreportresults action to the ReportTree program, 2 the jnlpnam...
Cross site scripting
Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...
CVE-2008-4928
Cross-site scripting XSS vulnerability in the redirect function in functions.php in MyBB aka MyBulletinBoard 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php, related to use of the ajax option to request a...
CVE-2008-4892
Cross-site scripting XSS vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. NOTE: some of these details are obtained from third party...
Cross site scripting
Cross-site scripting XSS vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers to inject arbitrary web script or HTML via the hash parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-4892
Cross-site scripting XSS vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. NOTE: some of these details are obtained from third party...
CVE-2008-4893
Affected software: Tribiq CMS 5.0.10a. Vulnerable component: templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php. Root cause: cross-site scripting when register_globals is enabled, via the template_path parameter. Impact: remote attackers can inject arbitrary web script or HTML. Exploi...
CVE-2008-4891
CVE-2008-4891 affects Planetluc SignMe 1.5 before 1.55. The vulnerability is a cross-site scripting (XSS) flaw in signme.inc.php that allows an attacker to inject arbitrary script or HTML via the hash parameter. Per NVD, the CVSS v2 base score is 4.3 (Medium) with network attack vector, no authen...
Cross site scripting
Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...