CVE-2008-4763

Multiple cross-site scripting XSS vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote attackers to inject arbitrary web script or HTML via the PHPSELF variable...

CVE-2008-4751

CVE-2008-4751 is a Cross-site Scripting (XSS) vulnerability in the file responsible for iPei Guestbook 2.0’s index.php. The issue allows remote attackers to inject arbitrary web script or HTML via the pg parameter (a vector distinct from CVE-2005-4597). The description identifies the affected com...

CVE-2008-4669

Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4661

Cross-site scripting XSS vulnerability in the Page Improvements smpageimprovements 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4629

Cross-site scripting XSS vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4629

Cross-site scripting XSS vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4542

Cross-site scripting XSS vulnerability in Cisco Unity 4.x before 4.21ES162, 5.x before 5.01ES56, and 7.x before 7.02ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database aka data store...

CVE-2008-4411

HP System Management Homepage (SMH) for Linux/Windows is vulnerable to a cross-site scripting (XSS) issue in versions before 2.1.15.210. A remote attacker can exploit unspecified vectors to inject arbitrary HTML/script in the user’s browser. This is tracked as CVE-2008-4411. HP provided a fixed r...

Cross site scripting

Cross-site scripting XSS vulnerability in Kantan WEB Server 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-4532

CVE-2008-4532 describes a reflected cross-site scripting vulnerability in MaxiScript Website Directory: index.php, exploitable via the keyword parameter in a search action. The flaw stems from improper handling of user input, allowing injection of arbitrary HTML/JavaScript. Impact: could enable a...

Cross site scripting

Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...

CVE-2008-4481

Cross-site scripting XSS vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via 1 the fn parameter during a dload action, 2 the mask parameter during a search action, and 3 the tab parameter during a sysinfo...

CVE-2008-4435

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

CVE-2008-4435

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

Cross site scripting

Cross-site scripting XSS vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter flavour variable. NOTE: some of these details are obtained from third party information...

CVE-2008-4370

Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...

Cross site scripting

Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...