Cross site scripting

Cross-site scripting XSS vulnerability in sendemail.php in AN Guestbook ANG 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

CVE-2008-2397

The CVE-2008-2397 is an XSS vulnerability in dotCMS 1.x, affecting the search-results.dot component via the search_query parameter. The underlying issue is failure to sanitize this input, enabling remote attackers to inject arbitrary HTML/JavaScript into a user’s browser. Connected sources (Nessu...

Cross site scripting

Cross-site scripting XSS vulnerability in the airfilemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 msgscript2 and 2 msgscript3 parameters...

CVE-2008-2201

Multiple cross-site scripting XSS vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 header, 2 header2, 3 header3, 4 header4, 5 header5, 6 header6, 7 header7, 8 header8, and 9 header9 parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 header, 2 header2, 3 header3, 4 header4, 5 header5, 6 header6, 7 header7, 8 header8, and 9 header9 parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter to admin/index.php in a blogs search action, the 2 msgcharset and 3 msgheader9 parameters to admin/inc/header.php, and the 4 keywords...

CVE-2008-2209

CVE-2008-2209 involves multiple cross-site scripting (XSS) flaws in Maian Greeting 2.1, specifically in admin/inc/header.php. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the msg_script and msg_script2 parameters. CVSS metrics in the provided data indicate...

CVE-2008-2202

Maian Uploader 4.0 is affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script or HTML via: (1) the keywords parameter to upload/admin/index.php in a search action, (2) the msg_charset parameter to admin/inc/header.php, (3) ...

CVE-2008-2200

Maian Weblog 4.0 is affected by multiple cross-site scripting (XSS) vulnerabilities. The CVE-2008-2200 entry specifies exploitable vectors in the web app: (1) keywords parameter to admin/index.php in a blogs search action, (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, an...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360...

Cross site scripting

Cross-site scripting XSS vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbitrary web script or HTML via the level parameter in a redirect action, possibly involving interface/redirect.htm.php...

CVE-2008-2188

Multiple cross-site scripting XSS vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 bookCopyright and 2 ver parameters to a footer.php, and the 3 bookName, 4 bookMetaTags, and 5 estiloCSS parameters to b header.php...

CVE-2008-2188

Multiple cross-site scripting XSS vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 bookCopyright and 2 ver parameters to a footer.php, and the 3 bookName, 4 bookMetaTags, and 5 estiloCSS parameters to b header.php...

Cross site scripting

Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...

CVE-2008-2162

Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...

CVE-2008-2162

Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...

CVE-2008-2131

Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to index.php and the 2 returnURL parameter to tux-login.php...