CVE-2010-2697

Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-2692

Cross-site scripting XSS vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or HTML via a review comment...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an articolo action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 tipo or 2 destino parameter to loginregistrese.php3 in the Services section, 3 the rubro parameter to precios.php3 in the Products section, 4...

CVE-2010-1328

TornadoStore 1.4.3 and earlier is affected by multiple reflected XSS vulnerabilities. The issues arise from insufficient sanitization of user-supplied input in several parameters across both the Services, Products, and e-Commerce sections, including login_registrese.php3 (tipo, destino), precios....

CVE-2010-2617

Cross-site scripting XSS vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the JFaq comjfaq component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the postid parameter in a modify action...

Cross site scripting

Cross-site scripting XSS vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter...

CVE-2010-2463

CVE-2010-2463 affects Jamroom before 4.1.9. The XSS vulnerability occurs in forum.php’s modify action via the post_id parameter due to input sanitization flaws, allowing remote attackers to inject arbitrary HTML/JavaScript into users’ browsers. An exploit example is provided by HTBridge (and rela...

Cross site scripting

Cross-site scripting XSS vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625...

CVE-2010-0778: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.33 and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1448

Cross-site scripting XSS vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625...

CVE-2010-1625

CVE-2010-1625 is tied to the lxr-cvs project (Debian DSA-2092-1). The issue is a remote cross-site scripting (XSS) vulnerability caused by insufficient input sanitizing in the code-indexing tool with a web frontend. An attacker could inject script code via user-supplied input processed on the sea...

CVE-2010-2428

Cross-site scripting XSS vulnerability in adminloginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted POST request...

CVE-2010-2356

Cross-site scripting XSS vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the courseid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 sbr, 3 p, and 4 sbl parameters, different vectors than CVE-2007-3137...

Cross site scripting

Cross-site scripting XSS vulnerability in cmsdata.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2010-2179

CVE-2010-2179 is a documented XSS in Adobe Flash Player (and related Flash/AIR components) triggered when Firefox/Chrome access certain URLs. Connected advisories (RHSA-2010-0470 and RHSA-2010-0464) describe a flash-plugin security update addressing this and related CVEs, noting an input sanitiza...

CVE-2010-2275

Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...