CVE-2010-3715: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the RemoveXSS function, and allow remote authenticated users to inject arbitrary web...

CVE-2010-3289: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2010-4716

Name of the Vulnerable Software and Affected Versions HP AssetCenter versions 5.0x through AC 5.03 HP AssetManager versions 5.1x through AM 5.12 HP AssetManager versions 5.2x through AM 5.22 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attacker...

Debian Security Advisory DSA 2097-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 2097-1. OpenVAS Vulnerability Test $Id: deb20971.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2097-1 phpmyadmin Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web script or HTML via input to the 1 Add Pages, 2 Add Global Content, 3 Edit Global Content, 4 Add Article, 5 Add Category, 6 Add Field Definition, or 7 Add Shortcut...

CVE-2010-3882

CMS Made Simple 1.7.1 and earlier are affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script or HTML via inputs to modules including Add Pages, Add Global Content, Edit Global Content, Add Article, Add Category, Add Field Definition, or Add Shortcut. The c...

CVE-2010-3690

Multiple cross-site scripting XSS vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via 1 a crafted Proxy Granting Ticket IOU PGTiou parameter to the callback function in client.php, 2 vectors involving functions that...

PT-2010-5003

Name of the Vulnerable Software and Affected Versions phpCAS versions prior to 1.1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via a crafted PGTiou parameter to the callback function in client.php, or through vectors involving...

Cross site scripting

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2010-3952

Name of the Vulnerable Software and Affected Versions AD-EDIT2 versions prior to 3.0.9 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 3.0.9, update to version 3.0.9 or later to resolve th...

PT-2010-4720

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.3 Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved through various means, including: - a plugin name, - an enumeration value or a Strin...

CVE-2010-2453

Multiple cross-site scripting XSS vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted 1 USER or 2 PASS command, which is written by the FTP logging module to a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted 1 USER or 2 PASS command, which is written by the FTP logging module to a...

CVE-2010-2453

Multiple cross-site scripting XSS vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted 1 USER or 2 PASS command, which is written by the FTP logging module to a...

PT-2010-4029

Name of the Vulnerable Software and Affected Versions Synology Disk Station versions 2.x before DSM3.0-1337 Description The issue allows remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted USER or PASS command. This is related to a "web...

Cross site scripting

Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...

CVE-2010-3070

CVE-2010-3070 affects MantisBT that bundles NuSOAP 0.9.5, enabling a remote XSS via PATH_INFO to PHP scripts using NuSOAP classes. The vulnerability arises from NuSOAP in MantisBT not sanitizing user input passed to nusoap.php, allowing injection of arbitrary HTML/script. Public references and Op...

Cross site scripting

Cross-site scripting XSS vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...

CVE-2010-3294

Cross-site scripting XSS vulnerability in apc.php in the Alternative PHP Cache APC extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...