CVE-2012-5104

Cross-site scripting XSS vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter...

CVE-2012-5099

CVE-2012-5099 : A cross-site scripting (XSS) vulnerability exists in list.php for PHPB2B 4.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the q parameter in a search action. The connected documents confirm the affected software and the vulnerable pa...

Cross site scripting

Cross-site scripting XSS vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with permissions to "update Webform nodes" to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5181

CVE-2011-5181 : A cross-site scripting vulnerability exists in the WordPress plugin ClickDesk Live Support – Live Chat 2.0, specifically in the clickdesk.php file where the cdwidgetid parameter is not properly sanitized. This allows remote attackers to inject arbitrary scripts/HTML into pages. Im...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 login.php, 2 admin.php, or 3 preferences.php...

PT-2012-2165

Name of the Vulnerable Software and Affected Versions Support Timer module versions 6.x-1.x before 6.x-1.4 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users with the "track time spent" permission to inject arbitrary web script or...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

PT-2012-3404

Name of the Vulnerable Software and Affected Versions Drupal Managesite module versions 6.x-1.x before 6.1-1.1 Description The issue allows remote authenticated users with administer managesite permissions to inject arbitrary web script or HTML via the title parameter when adding or updating a...

CVE-2012-1651: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1654

Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...

CVE-2012-2060

CVE-2012-2060 is an XSS vulnerability in the Drupal Admin tools module. The connected records identify the affected component as Admin tools, describe an XSS that allows injection of arbitrary script/HTML via unspecified vectors, and note a CVSSv2 base score of 4.3 (Medium) with no documented fix...

CVE-2010-4823

Cross-site scripting XSS vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is not used, allows remote attackers to inject arbitrary web script or HTML via "missing URL actions."...

CVE-2012-2995

Multiple cross-site scripting XSS vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-BuildWin321394 allow remote attackers to inject arbitrary web script or HTML via 1 the wrsApprovedURL parameter to addRuleAttrWrsApproveUrl.imss or 2 the src parameter to initUpdSchPage.imss...

CVE-2012-2995

CVE-2012-2995 describes cross-site scripting vulnerabilities in Trend Micro InterScan Messaging Security Suite version 7.1-Build_Win32_1394. The stored XSS can be triggered via wrsApprovedURL in addRuleAttrWrsApproveUrl.imss, while non-persistent/reflected XSS can be triggered via src in initUpdS...

PT-2012-5695

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.12 SilverStripe versions 2.4.x through 2.4.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted strings to various methods in a template. The affected method...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 q or 2 category parameter...

CVE-2012-4360

Cross-site scripting XSS vulnerability in the modpagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4360: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the modpagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-5658

Name of the Vulnerable Software and Affected Versions Endian Firewall version 2.4 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This can be achieved via the createrule parameter to "dnat.cgi", the addrule parameter ...

CVE-2012-2536

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...