CVE-2007-6486

CVE-2007-6486 affects LineShout 1.0’s shout.php (the shoutbox). The vulnerability is multiple cross-site scripting (XSS) weaknesses that allow remote attackers to inject arbitrary web script or HTML via the username (nickname) or message parameter. The description notes that some details are from...

CVE-2007-6489

Multiple cross-site scripting XSS vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the 1 gbmail, 2 gbname, and 3 gbtext parameters in a guestbook action to index.php, and unspecified other vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 c and 2 h parameters to a web/hostgmetrics.php; the 3 G, 4 me, 5 x, 6 n, 7 v, 8 l, 9 vl, and 10 st parameters to b web/graph.php; and th...

CVE-2007-6364

Cross-site scripting XSS vulnerability in modificarPerfil.php in JLMForo System allows remote authenticated users to inject arbitrary web script or HTML via a signature...

CVE-2007-6364

Cross-site scripting XSS vulnerability in modificarPerfil.php in JLMForo System allows remote authenticated users to inject arbitrary web script or HTML via a signature...

CVE-2007-6301

Cross-site scripting XSS vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

EUVD-2007-6238

Multiple cross-site scripting XSS vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 rmore parameter to xlaabsolutenm.aspx and the 2 template parameter to pages/default.aspx...

CVE-2007-6232

Cross-site scripting XSS vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action...

CVE-2007-6196

CVE-2007-6196 – Calacode @Mail prior to 5.2 : A cross-site scripting (XSS) vulnerability exists in util.php where an attacker can inject arbitrary script/HTML via the func parameter. The issue is documented in multiple sources (e.g., NVD) with a base score of 4.3 (Medium) and an attack vector ove...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a category action...

CVE-2007-6157

Cross-site scripting XSS vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

CVE-2007-6160

Cross-site scripting XSS vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via the aarstal parameter in a yeardetail action...

CVE-2007-6142

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

CVE-2007-6142

The CVE affects ph03y3nk just another flat file (JAF) CMS 4.0 RC2. It describes reflected Cross‑Site Scripting via the index.php show parameter and the print.php print parameter, enabling injection of arbitrary web script/HTML. The root cause is input handling in these two parameters leading to s...

CVE-2007-6126

Multiple cross-site scripting XSS vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to 1 xml/index.php; or 2 the year parameter to view.page.inc.php, which is reachable through a view action to the top-level...

CVE-2007-6110

Cross-site scripting XSS vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2007-6100

CVE-2007-6100 is a cross-site scripting (XSS) vulnerability in phpMyAdmin prior to 2.11.2.2. The flaw occurs in libraries/auth/cookie.auth.lib.php where, when logins use cookie auth_type, an attacker can inject script via the convcharset parameter to index.php. The issue affects phpMyAdmin versio...

CVE-2007-6090

CVE-2007-6090 is an XSS vulnerability in Nuked-Klan 1.7.5 where the index.php file parameter accepts unsanitized input, enabling remote attackers to inject arbitrary script via the file parameter. Exploitation details exist (Exploit-DB entry) showing crafted URLs that trigger script execution in ...

CVE-2007-6054

The CVE-2007-6054 entry describes an XSS vulnerability in the login page of Aruba 800 Mobility Controller (versions 2.5.4.18 and earlier; 2.4.8.6-FIPS and earlier). The issue occurs in the management interface via PATH_INFO to the /screens URI, related to the url variable, allowing remote attacke...

CVE-2007-6055

CVE-2007-6055 is a cross-site scripting (XSS) vulnerability affecting Liferay Portal 4.1.0 and 4.1.1, exploitable via the login parameter in c/portal/login. The issue arises from a regression after an earlier fix, as noted in the description. Connected documents provide corroborating context (e.g...