CVE-2007-3834

Multiple cross-site scripting XSS vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue, CVE-2007-3835...

CVE-2007-3014

Multiple cross-site scripting XSS vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 errors/rights.asp or 2 errors/transaction.asp, or 3 the name of a MIME type mimetype...

CVE-2007-3014

CVE-2007-3014 affects activeWeb contentserver prior to 5.6.2964. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the msg parameter in errors/rights.asp and errors/transaction.asp, and via the name of a MIME type when adding new mimetypes. Affected versions are

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in HiddenChest "is ve Bayi Basvuru Formu" Yb ve Bayi Babvuru Formu allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

Cross site scripting

Cross-site scripting XSS vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified form fields on the blogroll page...

Cross site scripting

Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...

CVE-2007-3594

Multiple cross-site scripting XSS vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter in a ping.do and b traceRoute.do in map/; the 2 reportName, 3 displayName, and 4 selectedNode parameters to c...

CVE-2007-3578

PHPIDS before 20070703 does not properly handle 1 arithmetic expressions and 2 unclosed comments, which allows remote attackers to inject arbitrary web script...

CVE-2007-3579

PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script...

CVE-2007-3577

PHPIDS before 20070703 does not properly handle use of the substr method in 1 document.location.search and 2 document.referrer; 3 certain use of document.location.hash; 4 certain "windoweval" and similar expressions; 5 certain Function expressions; 6 certain '=' expressions, as demonstrated by a...

CVE-2007-3579

PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script...

CVE-2007-3579

CVE-2007-3579 affects PHPIDS prior to 20070703. The vulnerability arises because the system does not correctly handle setting the .text property of a SCRIPT element before it is attached to the DOM, enabling a remote attacker to inject arbitrary web script. The available documents confirm the aff...

CVE-2007-3569

Multiple cross-site scripting XSS vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the 1 updateform and 2 displayform parameter to a gateway/gateway.exe; the 3 TERMS, 4 database, 5 srchad, 6 SuggestedSearch, and 7 searchform...

CVE-2007-3569

Multiple cross-site scripting XSS vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the 1 updateform and 2 displayform parameter to a gateway/gateway.exe; the 3 TERMS, 4 database, 5 srchad, 6 SuggestedSearch, and 7 searchform...

CVE-2007-3569

Affected product : Oliver Library Management System. Vulnerable vectors : XSS via the parameters (updateform, displayform) to gateway/gateway.exe and via (TERMS, database, srchad, SuggestedSearch, searchform) on the Basic Search page; and (8) username during login. Root cause : likely improper in...

CVE-2007-3561

CVE-2007-3561 describes a cross-site scripting (XSS) vulnerability in the ara.asp page of Efendy Blog 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the ara parameter. Exploitation details, affected versions, and remediation are not provided in the connected doc...

CVE-2007-3559

The CVE-2007-3559 affects PHP-Fusion 6.01.9 and 6.01.10, specifically the infusions/shoutbox_panel/shoutbox_panel.php component. The vulnerability is a Cross-Site Scripting (XSS) issue related to the FUSION_QUERY constant when guest posts are enabled, allowing remote authenticated users to inject...

CVE-2007-3553

Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...

EUVD-2007-3537

Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Google Custom Search Engine allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this issue is disputed by the Google Security Team, who states that "Google does not provide the 'search.php' script...