6663 matches found
CVE-2005-4369
CVE-2005-4369 describes a cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified search parameters, potentially via strSearchKeywords to browse.asp. The NVD data lists a CVSS v2 base score of 4.3 (...
CVE-2005-4372
The CVE-2005-4372 entry describes a Cross-site scripting (XSS) vulnerability in Adaptive Website Framework (AWF) prior to or including version 2.10, exploitable via the page parameter in account.html. The underlying issue is improper handling of the page value, allowing remote attackers to inject...
CVE-2005-4379
Bitweaver 1.1 and 1.1.1 beta are affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) sort_mode in fisheye/list_galleries.php, messages/message_box.php, and users/my.php; (2) post_id ...
CVE-2005-4374
Multiple cross-site scripting XSS vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to faq.asp and 2 searchQuery parameter to search.asp...
CVE-2005-4327
Multiple cross-site scripting XSS vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the 1 function, 2 year, and 3 date parameters to webcal.cgi, 4 new calendar entries, and 5 notes for entries...
CVE-2005-4333
CVE-2005-4333 affects Binary Board System (BBS) 0.2.5 and earlier. It describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML through parameters to reply.pl (1) inreplyto, (2) article, (3) board; and to (b) stats.pl, and to ...
CVE-2005-4311
Cross-site scripting XSS vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via 1 the page parameter in dcboard.php and 2 unspecified search parameters...
CVE-2005-4306
CVE-2005-4306 describes multiple XSS vulnerabilities in SiteNet BBS 2.0 and earlier. The issues arise in the handling of user-supplied input to netboardr.cgi via the parameters (pg, tid, cid, fid) and to search.cgi via the cid parameter, allowing remote attackers to inject arbitrary web script or...
CVE-2005-4282
Cross-site scripting XSS vulnerability in Zaygo DomainCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML, possibly via the root parameter to zaygo.cgi...
CVE-2005-4292
Cross-site scripting XSS vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature...
CVE-2005-4262
Cross-site scripting XSS vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the 1 startrow and 2 catid parameter. NOTE: this issue might be resultant from the SQL injection problem CVE-2005-4263...
CVE-2005-4229
Cross-site scripting XSS vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources and...
CVE-2005-4237
Cross-site scripting XSS vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module...
CVE-2005-4229
Cross-site scripting XSS vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources and...
CVE-2005-4245
CVE-2005-4245 is a cross-site scripting (XSS) vulnerability in Snipe Gallery 3.1.4 and earlier affecting the file search.php . The issue arises from the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the record, the impact is confidentiality: non...
CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
CVE-2005-4196
Multiple cross-site scripting XSS vulnerabilities in Scout Portal Toolkit SPT 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the ss parameter in SPT--QuickSearch.php; 2 ParentId parameter in SPT--BrowseResources.php; 3 the ResourceId parameter in...
CVE-2005-4177
The CVE-2005-4177 entry concerns an XSS vulnerability in Magic Book Personal and Professional 2.0, specifically in the book.cfm component where the StartRow parameter is not properly sanitized. The vulnerability could allow remote attackers to inject arbitrary web script or HTML, as documented by...
CVE-2005-4138
Multiple cross-site scripting XSS vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the 1 Wohnort and 2 Beruf fields in editprofile.php, 3 user parameter array in vprofile.php, and 4 the action parameter in misc.php...