CVE-2006-0605

Multiple cross-site scripting XSS vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the 1 Handle or 2 Message fields...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "posting new messages."...

CVE-2006-0536

Cross-site scripting XSS vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter. NOTE: some sources say that the affected parameter is "date," but the demonstration URL shows that it is "sort"...

Cross site scripting

Cross-site scripting XSS vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via the numdays parameter...

CVE-2006-0536

Cross-site scripting XSS vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter. NOTE: some sources say that the affected parameter is "date," but the demonstration URL shows that it is "sort"...

CVE-2006-0524

Cross-site scripting XSS vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-0521

CVE-2006-0521 is a Cross-site scripting (XSS) vulnerability in BrowserCRM’s results.php where a manipulated query parameter can inject arbitrary script/HTML (demonstrated with an IMG SRC tag). Affects BrowserCRM; CVSS v2 base score 4.3 (MEDIUM). No explicit exploit details or remediation are prov...

CVE-2006-0521

Cross-site scripting XSS vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag...

CVE-2006-0509

Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...

CVE-2006-0480

Cross-site scripting XSS vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitrary web script or HTML via the query parameter in the search file...

CVE-2006-0466

Cross-site scripting XSS vulnerability in search.asp in Goldstag Content Management System allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2006-0465

Cross-site scripting XSS vulnerability in risultatiricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web script or HTML via the cerca parameter...

CVE-2006-0463

CVE-2006-0463 involves IdeoContent Manager and is described as a Cross-site scripting (XSS) vulnerability. The vulnerability allows remote attackers to inject arbitrary web script or HTML via (1) the goto_id parameter to index.php or (2) the page parameter to news_full.php. The connected document...

CVE-2006-0443

CVE-2006-0443 describes a cross-site scripting (XSS) flaw in CheesyBlog 1.0 (archive.php) that allows remote attackers to inject arbitrary script/HTML via the realname, comment parameters, or a javascript: URI in the url parameter when adding a comment. Affected component is the archive.php handl...

CVE-2006-0378

CVE-2006-0378 is a cross-site scripting (XSS) vulnerability in Netrix X-Site Manager. The issue allows remote attackers to inject arbitrary web script or HTML via the product_id parameter, with the component identified as product_details.php in some installations. The connected documents provide ...

CVE-2006-0364

Cross-site scripting XSS vulnerability in MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as...

Cross site scripting

Cross-site scripting XSS vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name fullname...

Cross site scripting

Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter...

CVE-2006-0242

Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter...

CVE-2006-0242

CVE-2006-0242 corresponds to a Cross-site scripting vulnerability in PHP Fusebox 4.0.6, affecting index.php where the fuseaction parameter can be used to inject arbitrary web script or HTML. The vulnerability is triggered remotely via the fuseaction parameter, enabling partial confidentiality and...