CVE-2012-2936

CVE-2012-2936 affects Pligg CMS prior to 1.2.2. The vulnerability is a set of cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script/HTML via: (1) user or (2) page parameters to (a) admin/admin_comments.php or (b) admin/admin_links.php, or the list parameter in a ...

Cross site scripting

Cross-site scripting XSS vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC/DBCheck.php in OSCommerce Online Merchant 3.0.2, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the name parameter to oscommerce/index.php, whi...

CVE-2012-2920

The CVE-2012-2920 entry involves a Cross-site Scripting (XSS) vulnerability in the WordPress User Photo plugin, specifically in the userphoto_options_page function of user-photo.php prior to version 0.9.5.2. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0296

Multiple cross-site scripting XSS vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in backupDB.php in SiliSoftware backupDB 1.2.7a allows remote attackers to inject arbitrary web script or HTML via the onlyDB parameter...

PT-2012-1343

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.2.x through 4.2.15 TYPO3 versions 4.3.x through 4.3.8 TYPO3 versions 4.4.x through 4.4.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, due to multiple...

PT-2012-4355

Name of the Vulnerable Software and Affected Versions Viscacha version 0.8.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via several fields, including the text field in the Private Messages System, the Bad Word field in Zensur, or the Portal or Topic fie...

CVE-2010-5100: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie...

CVE-2012-1246

Cross-site scripting XSS vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie...

CVE-2012-2008: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2005

Cross-site scripting XSS vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2001: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3716

Name of the Vulnerable Software and Affected Versions HP SNMP Agents for Linux versions prior to 9.0.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HP SNMP Agents for Linux versions prior t...

CVE-2012-0471

Cross-site scripting XSS vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via a multibyte character set...

Cross site scripting

Cross-site scripting XSS vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4...

Cross site scripting

Cross-site scripting XSS vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter aka Email address field in an edituser configuration action...