CVE-2006-6451

Multiple cross-site scripting XSS vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 getpassword.php or 2 loginup.php3...

CVE-2006-6451

SWsoft Plesk 8.0.1 and earlier are affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to get_password.php or login_up.php3. The issue is documented across CVE-2006-6451, with CVSSv2 base metrics indicating a mediu...

CVE-2006-6389

Multiple cross-site scripting XSS vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via the 1 Taaa parameter to a up.php, or the 2 pollhtml and 3 Bloks parameters to b polls.php, different vectors than CVE-2006-5770...

CVE-2006-6393

CVE-2006-6393 is an XSS vulnerability in Jonas Gauffin Publicera 1.0-rc2 and earlier. The issue arises from InputFilter::getString, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. Documented impact is client-side data/script integrity and potential user interact...

CVE-2006-6142

Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the 1 mailto parameter in a webmail.php, the 2 session and 3 deletedraft parameters in b compose.php, and 4 unspecified vectors involving "a...

CVE-2006-6142

Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the 1 mailto parameter in a webmail.php, the 2 session and 3 deletedraft parameters in b compose.php, and 4 unspecified vectors involving "a...

CVE-2006-6272

Technical details about CVE-2006-6272 are not provided in the connected documents; the available information only reiterates the XSS description. Monitor for updates.

CVE-2006-6256

CVE-2006-6256 concerns a Cross-site Scripting (XSS) vulnerability in the file manager (admin/bro_main.php) of AlternC 0.9.5 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via a folder name. Affected software is AlternC, up to version 0.9.5 (older). The connec...

CVE-2006-6211

BirdBlog 1.4.0 is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary script or HTML via: (1) the msg parameter to admin/admincore.php, (2) the month parameter to admin/comments.php or admin/entries.php, and (3) the page parameter...

CVE-2006-6162

Cross-site scripting XSS vulnerability in tiki-editstructures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the pageAlias parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6159

Multiple cross-site scripting XSS vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 message or 2 subject parameter...

CVE-2006-6118

Cross-site scripting XSS vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-6096

Cross-site scripting XSS vulnerability in activenewssearch.asp in ActiveNews Manager allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2006-6082

Multiple cross-site scripting XSS vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to addlisting.asp or the 2 search parameter to search.asp...

CVE-2006-6088

Multiple cross-site scripting XSS vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 n or 2 d parameter in igallery.asp, or 3 an unspecified parameter related to search, possibly the Search Gallery field, or the myquery parameter, i...

CVE-2006-6075

Cross-site scripting XSS vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6075

The CVE-2006-6075 entry describes a cross-site scripting (XSS) vulnerability in BaalAsp forum, specifically in addpost1.asp via the name parameter. The underlying issue is insufficient input handling that allows remote attackers to inject arbitrary script/HTML. CVSS v2 base score is 6.8 (Medium) ...

CVE-2006-6037

Multiple cross-site scripting XSS vulnerabilities in index.php in Dan Jensen Travelsized CMS 0.4.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 page, 2 pageid, or 3 language parameter...

CVE-2006-6040

CVE-2006-6040 affects Jelsoft vBulletin 3.6.x, specifically admincp/index.php. The vulnerability is due to cross-site scripting (XSS) via two parameters: prefs in a buildnavprefs action and navprefs in a savenavprefs action, enabling remote attackers to inject arbitrary script/HTML. Public refere...

CVE-2006-6037

The CVE-2006-6037 entry describes multiple XSS vulnerabilities in Dan Jensen Travelsized CMS 0.4.1 and earlier, exploitable via index.php parameters (page, page_id, language). The underlying issue is reflected in the provided description; no exploitation details or exact root cause are given beyo...