CVE-2006-1071

Cross-site scripting XSS vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1064

Multiple cross-site scripting XSS vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1064

Multiple cross-site scripting XSS vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1041

Multiple cross-site scripting XSS vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 rssquery parameter to search.php or 2 tag parameter to tags.php...

CVE-2006-1019

Cross-site scripting XSS vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a BBCode url tag when using the showpost function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-1025

Cross-site scripting XSS vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote attackers to inject arbitrary web script or HTML via the ShipMethod parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1019

The vulnerability described as CVE-2006-1019 is an XSS in UKiBoard 3.0.1, specifically in fce.php. The issue allows an attacker to inject arbitrary web script or HTML by exploiting a BBCode url tag when using the show_post function. The affected component is the fce.php file within UKiBoard 3.0.1...

CVE-2006-0974

Cross-site scripting XSS vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the errtxt parameter...

CVE-2006-0980

Multiple cross-site scripting XSS vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in 1 index.cgi and 2 viewday.cgi...

CVE-2006-0974

Cross-site scripting XSS vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the errtxt parameter...

CVE-2006-0984

Cross-site scripting XSS vulnerability in incheader.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter...

CVE-2006-0983

CVE-2006-0983 affects QwikiWiki version 1.4, specifically the index.php page, with a cross-site scripting (XSS) flaw exploitable via the page parameter. The underlying issue allows remote attackers to inject arbitrary web script or HTML. Documented impacts indicate XSS risk, but no explicit remed...

Cross site scripting

Cross-site scripting XSS vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0885

Cross-site scripting XSS vulnerability in shownews.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the show parameter...

CVE-2006-0889

Cross-site scripting XSS vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HTML via the EventText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0896

Cross-site scripting XSS vulnerability in Sources/Register.php in Simple Machine Forum SMF 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field...

CVE-2006-0875

Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web script or HTML via the lid parameter...

CVE-2006-0875

Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web script or HTML via the lid parameter...

CVE-2006-0806

Multiple cross-site scripting XSS vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via 1 the nextpage parameter in adodb-pager.inc.php and 2 other unspecified vectors related to PHPSELF...

Cross site scripting

Cross-site scripting XSS vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote attackers to inject arbitrary web script or HTML via the commenttext parameter to the user comment page /edit/Comment...