PT-2011-4388

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Historian versions 4.x and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters. Recommendations For GE...

PT-2011-1937

Name of the Vulnerable Software and Affected Versions Exponent CMS version 0.97.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the u parameter. Recommendations For Exponent CMS version 0.97.0, update to a version that...

Cross site scripting

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...

PT-2011-3084

Name of the Vulnerable Software and Affected Versions IBM HTTP Server versions 2.0.47 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2 htdocs//manual/ibm/. Recommendations...

CVE-2011-3383

Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "the web page to be output."...

CVE-2011-4170

Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname in a /me event, a different...

CVE-2011-4024

Cross-site scripting XSS vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3243

Cross-site scripting XSS vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows...

CVE-2011-1897: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Enkai-kun before 110916 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2675

CVE-2011-2675 affects Enkai-kun prior to 110916, exposing an XSS flaw that lets remote attackers inject arbitrary script/HTML via unspecified vectors. Impact: arbitrary script execution in the user’s browser. Mitigation: update to the latest enkai110916.tgz (or later) as advised by JVN/NVD entrie...

CVE-2010-4930

Cross-site scripting XSS vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action...

CVE-2010-4907

Cross-site scripting XSS vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562...

Cross site scripting

Cross-site scripting XSS vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in charmap.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the 1 height or 2 width parameter...

CVE-2010-4909

CVE-2010-4909 affects PaysiteReviewCMS 1.1. The connected sources describe multiple cross-site scripting (XSS) vulnerabilities allowing remote attackers to inject arbitrary script or HTML via the q parameter to search.php or the image parameter to image.php. The NVD entry corroborates the same de...

CVE-2010-4893

CVE-2010-4893 : XSS vulnerability in FestOS 2.3b, affecting foodvendors.php via the details action’s category parameter, allowing remote arbitrary web-script/HTML injection. The vulnerability is documented across multiple sources (NVD/NVD entry) with no publicly provided patch details in the conn...

CVE-2011-3598

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...