CVE-2010-4607

Multiple cross-site scripting XSS vulnerabilities in Habari 0.6.5, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 additemform parameter to system/admin/dashadditem.php and the 2 statusdata parameter to system/admin/dashstatus.php. NOTE: so...

CVE-2010-4616

ImpressCMS vulnerability CVE-2010-4616: An XSS flaw in modules/content/admin/content.php (quicksearch_ContentContent) affects ImpressCMS 1.2.3 Final and possibly earlier versions before 1.2.4. An attacker can inject arbitrary HTML/script via the quicksearch_ContentContent parameter, with exploita...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Discovery & Dependency Mapping Inventory DDMI 2.5x, 7.5x, and 7.6x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4111: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3906

Cross-site scripting XSS vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 f and 2 fp parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 f and 2 fp parameters...

CVE-2010-3921

Cross-site scripting XSS vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3921: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4246

Multiple cross-site scripting XSS vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the 1 ifnum or 2 ifname parameter, a different vulnerability than CVE-2008-1182...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the 1 ifnum or 2 ifname parameter, a different vulnerability than CVE-2008-1182...

CVE-2010-4405

Cross-site scripting XSS vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the selectsingle parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in gb.cgi in MRCGIGUY MCG Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, 3 website, and 4 message parameters...

CVE-2010-4361

Cross-site scripting XSS vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-4366

CVE-2010-4366: Concrete details across connected records show XSS in Chameleon Social Networking. The vulnerability is in forum_new_topic.php, exploitable via user-supplied thread_title and thread_description parameters in a message. Affected component: the forum topic creation feature of Chamele...

CVE-2010-4355

DaDaBIK is affected by CVE-2010-4355 in multiple entries. Specifically, DaDaBIK 4.3 beta2 (and 4.3 beta3 in certain environments) can be exploited via the insert/edit flow and select_single parameter (CVE-2010-4355). Related records note that in case-sensitive environments, DaDaBIK 4.3 beta3 does...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via 1 the username aka defaultusername field or 2 the password field in a Users Login action to index.php, or 3 the label parameter in a Settings GetFieldInfo...

PT-2010-5144

Name of the Vulnerable Software and Affected Versions IBM OmniFind Enterprise Edition versions prior to 9.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface. This can be demonstrated by the command...

Cross site scripting

Cross-site scripting XSS vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."...

CVE-2010-0783: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...