Cross site scripting

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf...

CVE-2010-4209: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf...

PYSEC-2010-29

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

CVE-2010-2477

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

CVE-2010-2477

CVE-2010-2477 involves multiple XSS vulnerabilities in the paste.httpexceptions implementation of Paste before 1.7.4, enabling remote injection of script/HTML via 404-related vectors. Affected components include paste.urlparser.StaticURLParser, paste.urlparser.PkgResourcesParser, paste.urlmap.URL...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted 1 background-image, 2 background, or 3 font-family Cascading Style Sheets CSS property, a different...

PT-2010-5341

Name of the Vulnerable Software and Affected Versions HTML Purifier versions prior to 4.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets CSS properties, specifically 1 background-image, 2 background, or 3 font-family, when...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in wp-content/plugins/cforms/libajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the 1 rs and 2 rsargs parameters...

CVE-2010-4030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2010-5318

Name of the Vulnerable Software and Affected Versions Attachmate Reflection for the Web versions 10.1.569 and earlier Attachmate Reflection for the Web 2008 R1 Attachmate Reflection for the Web 9.6 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrar...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3712

Cross-site scripting XSS vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving "multiple encoded entities," as demonstrated by the query string to index.php in the comweblinks or comcontent componen...

CVE-2010-3991: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2010-5312

Name of the Vulnerable Software and Affected Versions IBM Tivoli Access Manager for e-business version 6.1.0 before 6.1.0-TIV-TAM-FP0006 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including parm1 to ivt/ivtserver, and the method...

CVE-2010-4023: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4097

Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...

PT-2010-5292

Name of the Vulnerable Software and Affected Versions Aardvark Topsites PHP versions 5.2.0 through 5.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the mail, title, u, and url parameters in index.php. Recommendations For versions 5.2.0 and 5.2.1,...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the RemoveXSS function, and allow remote authenticated users to inject arbitrary web...