Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Domino Blogsphere 3.01 Beta 7 allows remote attackers to inject arbitrary web script or HTML via the name field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-4813

Cross-site scripting XSS vulnerability in Domino Blogsphere 3.01 Beta 7 allows remote attackers to inject arbitrary web script or HTML via the name field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-4741

CVE-2007-4741 affects Claroline prior to 1.8.6. The page admin/adminusers.php is vulnerable to cross-site scripting (XSS) via the sort parameter, allowing remote authenticated administrators to inject arbitrary web script or HTML. The vulnerability is triggered by manipulating the sort field and ...

CVE-2007-4555

CVE-2007-4555 describes a cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP's administration interface. The issue occurs when arguments to a valid command are not properly sanitized and are displayed by the view log option, enabling an attacker to inject arbitrary web script or HTML. Th...

CVE-2007-4544

CVE-2007-4544 is a cross-site scripting (XSS) vulnerability affecting WordPress MU (multi-user)

CVE-2007-4542

Multiple cross-site scripting XSS vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the 1 processLine function in maptemplate.c and the 2 writeError function in mapserv.c in the mapserv CGI program...

Cross site scripting

Cross-site scripting XSS vulnerability in D22-Shoutbox for Invision Power Board IPB or IP.Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4479

Cross-site scripting XSS vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter...

CVE-2007-4434

Cross-site scripting XSS vulnerability in textfilesearch.asp in the Text File Search ASP Classic edition allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2007-4365

CVE-2007-4365 is an XSS vulnerability affecting eXV2 CMS 2.0.5 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via a set_lang cookie to an unspecified component. Connected records also reference CVE-2007-1965 as a possible overlap. The available documents confirm the...

CVE-2007-4307

Multiple cross-site scripting XSS vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbitrary web script or HTML via the next parameter to 1 addaddress.php, 2 editshipdetails.php, 3 register.php, or 4 login.php in secure/...

CVE-2007-4318

CVE-2007-4318 is a cross-site scripting (XSS) vulnerability in the Zyxel Zywall 2 device running ZyNOS firmware 3.62(WK.6). The issue affects the management interface (Forms/General_1) where the sysSystemName parameter can be manipulated by remote authenticated administrators to inject arbitrary ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote attackers to inject arbitrary web script or HTML via the 1 yazan, 2 mail, and 3 yorum parameters. NOTE: some of these details are obtained from third party information...

CVE-2007-4297

Multiple cross-site scripting XSS vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote attackers to inject arbitrary web script or HTML via the 1 yazan, 2 mail, and 3 yorum parameters. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

CVE-2007-4264

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2007-3328...

CVE-2007-3384

Apache Tomcat 3.3.x is affected by CVE-2007-3384: multiple XSS vulnerabilities in the examples/servlet/CookieExample allow remote attackers to inject arbitrary script/HTML via the Name or Value fields, related to error messages, in Tomcat 3.3 through 3.3.2. Exploitation details are described acro...

CVE-2007-4144

Cross-site scripting XSS vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the basepath parameter, possibly related to 1 formprocessorpro.php ...