CVE-2012-3836

CVE-2012-3836 describes multiple XSS vulnerabilities in Baby Gekko prior to 1.2.0. The issues allow remote attackers to inject arbitrary script/HTML through a wide set of input vectors in various modules: groupname in savecategory (users), virtual_filename, branch, contact_person, street, city, p...

CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3837

CVE-2012-3837 affects Baby Gekko 1.2.0 and earlier. The vulnerability is a set of cross-site scripting (XSS) flaws in apps/users/registration.template.php, allowing remote attackers to inject arbitrary web script or HTML via the parameters (username, email_address, password, password_verify, firs...

CVE-2012-3232

Cross-site scripting XSS vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the texttitle parameter...

CVE-2012-3232: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the texttitle parameter...

CVE-2012-2723

Cross-site scripting XSS vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2638

The CVE-2012-2638 issue affects SmallPICT, impacting SmallPICT.cgi in SmallPICT versions prior to 2.7. It is a cross-site scripting (XSS) vulnerability that could allow a remote attacker to inject arbitrary web script or HTML, potentially leading to arbitrary script execution in a user’s browser....

CVE-2012-2634

Cross-site scripting XSS vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed...

PT-2012-4143

Name of the Vulnerable Software and Affected Versions @WEB ShoppingCart versions prior to 1.5.2.0 @WEB ShoppingCart T versions 1.5.0.1 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations F...

Cross site scripting

Cross-site scripting XSS vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2102 and SPA3102 before 5.2.13, and SPA 500 series IP phones before 7.4.9 allows remote attackers to inject arbitrary web script or HTML via the FROM field of an INVITE message, aka...

CVE-2012-2604: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields...

CVE-2012-1857

Cross-site scripting XSS vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."...

CVE-2012-1825

Multiple cross-site scripting XSS vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web script or HTML via 1 the loginname parameter in a forgotpass action or 2 the username parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters...

CVE-2011-2083

Multiple cross-site scripting XSS vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2083

Multiple cross-site scripting XSS vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2083

Multiple cross-site scripting XSS vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2083: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3169

Name of the Vulnerable Software and Affected Versions RSSOwl versions prior to 2.1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a feed. Recommendations For versions prior to 2.1.1, update to version 2.1.1 or later to resolve the...

CVE-2012-2938

Multiple cross-site scripting XSS vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to 1 holidayadd.php or 2 holidayview.php...