Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in ecoCMS allows remote attackers to inject arbitrary web script or HTML via the p parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.jcomments.php in the JoomlaTune JComments comjcomments component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php...

CVE-2010-5054

CVE-2010-5054 affects JAMWiki before version 0.8.4. It is a cross-site scripting (XSS) vulnerability in the Special:Login page, exploitable via the message parameter to inject arbitrary script/HTML. The CVSS base score is 4.3 (medium) with network attack vector, no confidentiality impact, partial...

PT-2011-4933

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.6.3 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For Joomla! versions 1.6.3 and...

PT-2011-4862

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi versions 9.0x through 9.1x Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HP Network Node Manager i NNMi...

CVE-2011-4155: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Network Node Manager i NNMi 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4156...

CVE-2011-4156: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Network Node Manager i NNMi 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155...

Cross site scripting

Cross-site scripting XSS vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Pligg before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4277

Cross-site scripting XSS vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote attackers to inject arbitrary web script or HTML via a crafted name of an object within a more object on a wiki page...

CVE-2011-3986: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Pligg before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-5031

Cross-site scripting XSS vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter aka the Search Box. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-5025

Cross-site scripting XSS vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web script or HTML via the fldpath parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5045

CVE-2010-5045 is an XSS vulnerability in Smart ASP Survey, specifically in poll/default.asp via the catid parameter. The root cause is lack of input validation/escaping enabling remote script injection. Impact described as script/HTML execution in the victim’s browser; exploitation details (paylo...

CVE-2011-4074

Cross-site scripting XSS vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an debug command...

CVE-2011-4074

CVE-2011-4074 affects phpldapadmin 1.2.x up to 1.2.1.1, with an XSS in cmd.php via _debug . The root cause is improper handling of the _debug parameter, allowing injection of arbitrary script/HTML. Fedora/OpenVAS advisories confirm a fix in updates (upgrade to the latest upstream development code...

CVE-2011-4074

Cross-site scripting XSS vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an debug command...