Cross site scripting

Cross-site scripting XSS vulnerability in MailDwarf 3.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-1714

CcCounter 2.0 contains a cross-site scripting (XSS) vulnerability in index.php through the dir parameter. The issue arises from insufficient input handling of dir, enabling remote attackers to inject arbitrary scripts/HTML that may be executed in a user’s browser. Impact is partial confidentialit...

CVE-2007-1714

Cross-site scripting XSS vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web script or HTML via dir parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in realGuestbook 5.01, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 bgcolor1, 2 fsmenu, 3 fcmenu, 4 ffmenu, 5 bgcolor2, 6 fsnormal, 7 fcnormal, and 8 ffnormal parameters to...

CVE-2007-1623

CVE-2007-1623 describes multiple XSS vulnerabilities in realGuestbook 5.01 that occur when PHP’s register_globals is enabled. Attackers can inject arbitrary script or HTML through the following parameters to welcome_admin.php: bg_color_1, fs_menu, fc_menu, ff_menu, bg_color_2, fs_normal, fc_norma...

CVE-2007-1623

Multiple cross-site scripting XSS vulnerabilities in realGuestbook 5.01, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 bgcolor1, 2 fsmenu, 3 fcmenu, 4 ffmenu, 5 bgcolor2, 6 fsnormal, 7 fcnormal, and 8 ffnormal parameters to...

Cross site scripting

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

CVE-2007-0240

Cross-site scripting XSS vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request...

CVE-2007-1576

Multiple cross-site scripting XSS vulnerabilities in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the 1 Projects, 2 Contacts, 3 Helpdesk, 4 Search only Gecko engine driven Browsers, and 5 Notes...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via 1 the signature in "dans profile," or 2 search.php...

CVE-2007-1551

CVE-2007-1551 affects phpx 3.5.15 with multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script or HTML via (1) the signature in "dans profile" and (2) search.php. The affected software is phpx 3.5.15; root cause details are not spelled...

CVE-2007-1515

Multiple cross-site scripting XSS vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via 1 the email Subject header in thread.php, 2 the editquery parameter in search.php, or other unspecified parameters in search.php. NOTE:...

Cross site scripting

Cross-site scripting XSS vulnerability in PORTAL.wwvmain.renderwarningscreen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the 1 poldurl and 2 pnewurl parameters...

CVE-2007-1482

Cross-site scripting XSS vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script or HTML via the eid parameter in a viewentry cmd...

CVE-2007-1405

Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 uid, and 3 nid parameters to a news.php, and the nid parameter to b rating.php...

CVE-2007-1248

Multiple cross-site scripting XSS vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 uid, and 3 nid parameters to a news.php, and the nid parameter to b rating.php...

CVE-2007-1240

Multiple cross-site scripting XSS vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script or HTML via 1 the searchkey parameter to index.php, or the 2 sn or 3 ri parameter to modules/htmlframechat/index.php. NOTE: the provenance of this information ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via 1 the sxYear parameter to calendar.php, 2 the search parameter to search.php, 3 the linkid parameter to redirect.php, or 4 the page parameter to calendarevents.php...

Cross site scripting

Cross-site scripting XSS vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter to the top-level URI, possibly related to a SQL error...