PT-2011-5084

Name of the Vulnerable Software and Affected Versions Parallels Plesk Small Business Panel version 10.2.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script. This is demonstrated by API endpoints such as...

PT-2011-5080

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.2.4100 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script. This is demonstrated by files such as Default.aspx and certain other files...

PT-2011-5127

Name of the Vulnerable Software and Affected Versions AutoSec Tools V-CMS version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can be achieved via two parameters: the p parameter to "redirect.php" and the box parameter to...

CVE-2011-4805

Cross-site scripting XSS vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML via the service parameter...

CVE-2011-4812

CVE-2011-4812 is described as a Cross-site Scripting (XSS) vulnerability affecting nowosci.php in BestShopPro. The vulnerability is triggered via the str parameter, allowing remote attackers to inject arbitrary web script or HTML. The core affected component appears to be the nowosci.php script i...

CVE-2011-4814

Dolibarr

PT-2011-5115

Name of the Vulnerable Software and Affected Versions Joomla! component com hmcommunity version prior to 1.01 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters in a save task for a profile to "index.php". The vulnerable parameters include...

CVE-2011-4707

Multiple cross-site scripting XSS vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the 1 instname parameter to the VsiTestScan servlet and 2 name parameter to the VsiTestServlet servlet...

CVE-2011-4265: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phpWebSite before 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-4917

Name of the Vulnerable Software and Affected Versions Etomite versions prior to 1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issue...

Cross site scripting

Cross-site scripting XSS vulnerability in Schneider Electric PowerChute Business Edition before 8.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 viewname parameter in a CalendarAjax action, 2 activitymode parameter in a DetailView action, 3 contactid and 4 parentid parameters in an...

CVE-2011-4344

Cross-site scripting XSS vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...

CVE-2011-2461

Cross-site scripting XSS vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains...

Cross site scripting

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

PT-2011-4996

Name of the Vulnerable Software and Affected Versions Flowplayer plugin versions prior to 1.2.12 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the URI. Recommendations For versions prior to...

Cross site scripting

Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in JAKCMS 2.0.4.1, and possibly other versions before 2.2.6 2011-09-23, allows remote attackers to inject arbitrary web script or HTML via the userpost parameter in a PM request, related to tinymce. NOTE: some of these details are obtained from...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 view/admin/logitem.php and 2 view/admin/logitemdetails.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a post that does not exist...

CVE-2011-4565

CVE-2011-4565 concerns XOOPS, affecting version 2.5.1.a (and possibly earlier). It describes two cross-site scripting (XSS) vectors: (1) the text parameter to include/formdhtmltextarea_preview.php and (2) the img BBCode tag within the message parameter to pmlite.php (Private Message). The availab...