CVE-2006-4528

Multiple cross-site scripting XSS vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 recherche parameter in recherchemembre.php and the 2 email parameter in test.php...

CVE-2006-4525

Cross-site scripting XSS vulnerability in CubeCart 3.0.12 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array...

CVE-2006-4496

Cross-site scripting XSS vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

CVE-2006-4479

Cross-site scripting XSS vulnerability in loginreq2.php in Visual Shapers ezContents 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the subgroupname parameter...

CVE-2006-4376

Multiple cross-site scripting XSS vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring...

CVE-2006-4358

CVE-2006-4358 describes a cross-site scripting (XSS) vulnerability in the Diesel Pay product, affecting the code path index.php via the read parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. According to the NVD entry, the CVSS v2 base score is 4.3 (Medi...

CVE-2006-4325

The CVE refers to Doika guestbook (version 2.5, possibly earlier) with a reflected XSS in gbook.php via the page parameter. This allows remote attackers to inject arbitrary scripts/HTML. No patch/remediation details are provided in the supplied documents; exploitation status and exact fixes are n...

CVE-2006-4293

Multiple cross-site scripting XSS vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter in dohtaccess.html, or the 2 file parameter in a editit.html or b showfile.html...

CVE-2006-4268

CubeCart

CVE-2006-4224

CVE-2006-4224 is an XSS vulnerability in Virtual War (VWar) calendar.php affecting VWar 1.5.0 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the year parameter. The CVE also notes that the page parameter vector is covered by CVE-2006-4009. No fur...

CVE-2006-4211

Cross-site scripting XSS vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4211

Cross-site scripting XSS vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4157

Cross-site scripting XSS vulnerability in index.php in Yet another Bulletin Board YaBB allows remote attackers to inject arbitrary web script or HTML via the categories parameter...

CVE-2006-4090

CVE-2006-4090 describes a cross-site scripting (XSS) vulnerability in Webligo BlogHoster 2.2. The issue arises in the comment posting flow, likely involving the nickname parameter in previewcomment.php and the From: part of the comment post, allowing remote attackers to inject arbitrary web scrip...

CVE-2006-4090

Cross-site scripting XSS vulnerability in Webligo BlogHoster 2.2 allows remote attackers to inject arbitrary web script or HTML via the "From: part of the comment post," probably involving the nickname parameter to previewcomment.php...

CVE-2006-4079

The CVE-2006-4079 entry describes a Cross-site scripting (XSS) vulnerability in DeluxeBB 1.08 (and possibly earlier) affecting newpost.php, where the subject parameter (topic title) is not properly sanitized. This allows remote attackers to inject arbitrary web script or HTML. The NVD metrics ass...

CVE-2006-3585

Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the 1 login parameter in admin/cms/index.php, 2 unspecified parameters in the "Supply news" page in formmail.php, 3 the URL in the "Site statistics" page, and...

CVE-2006-3585

CVE-2006-3585 describes multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1. Affected components include: the login parameter in admin/cms/index.php; parameters on the Supply news page in formmail.php; the URL in the Site statistics page; and the query_string parameter when ...

CVE-2006-4016

Cross-site scripting XSS vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-4016

The CVE-2006-4016 entry concerns a Cross-site Scripting (XSS) flaw in toendaCMS. Affected software: toendaCMS stable versions 1.0.3 and earlier, and unstable 1.1 and earlier. The vulnerability occurs in the s parameter of the /toendaCMS endpoint, allowing remote attackers to inject arbitrary web ...