CVE-2012-1021

Cross-site scripting XSS vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the catparentid parameter in an addcat action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 XWiki.XWikiCommentscomment parameter to xwiki/bin/commentadd/Main/WebHome, 2 XWiki.XWikiUsers0company parameter when editing a user profile, or 3...

Cross site scripting

Cross-site scripting XSS vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter...

PT-2012-3008

Name of the Vulnerable Software and Affected Versions Foswiki versions prior to 1.1.5 Description The issue allows remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via various parameters, including text, FirstName, LastName, OrganisationName, OrganisationUr...

CVE-2012-1021

Cross-site scripting XSS vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the catparentid parameter in an addcat action...

CVE-2012-1027: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in account-closed.tcl in project-open aka po 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed...

PT-2012-3010

Name of the Vulnerable Software and Affected Versions Apache Struts version 1.3.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain API endpoints. The vulnerable parameters include the name parameter to...

lknSupport XSS Vulnerability

Exploit for php platform in category web applications Title : lknSupport XSS Vulnerability Author : Red Security TEAM Date : 01/02/2012 Vendor : http://www.instantphp.com/store/details/16/lknsupport.html demo : http://www.instantphp.com/demo/lknsupport/ Tested On : Apache/2.2.21 Contact : Info 4t...

CVE-2011-5070

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to inject arbitrary web script or HTML via 1 the file name to incidentattachments.php; 2 unspecified vectors in linkadd.php, possibly involving origref, linkref, linktype parameters,...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Support Incident Tracker aka SiT! 3.65 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to inject arbitrary web script or HTML via 1 the file name to incidentattachments.php; 2 unspecified vectors in linkadd.php, possibly involving origref, linkref, linktype parameters,...

CVE-2011-5070

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to inject arbitrary web script or HTML via 1 the file name to incidentattachments.php; 2 unspecified vectors in linkadd.php, possibly involving origref, linkref, linktype parameters,...

CVE-2012-0936

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

PT-2012-2051

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions prior to 3.65 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters and the Referer header in multiple scripts, including "contact support.php",...

PT-2012-2960

Name of the Vulnerable Software and Affected Versions Acidcat CMS versions 3.5.1, 3.5.2, 3.5.6, and possibly earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to specific API endpoints, including "admin colors.asp", "admin config.asp",...

CVE-2012-0930: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-1538

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.3.x through 3.3.10.0 phpMyAdmin versions 3.4.x through 3.4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted table name, triggering improper HTML rendering on a Tracking...

CVE-2012-0791

Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 composeCache, 2 rtemode, or 3 filename parameters to the compose page; 4 formname parameter to the...

Cross site scripting

Cross-site scripting XSS vulnerability in HordeForm in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in smokepingcgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter...