CVE-2010-2003

The CVE-2010-2003 issue affects Advanced Poll 2.08, specifically the misc/get_admin.php script. A sanitation flaw in the mysql_host parameter enables cross-site scripting (XSS), allowing an attacker to inject arbitrary HTML/JavaScript into a victim’s browser. Exploitation details in HTBridge advi...

CVE-2010-0475

Cross-site scripting XSS vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter...

CVE-2009-4856

Cross-site scripting XSS vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2009-4859

Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...

CVE-2009-4869

Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.cgi in Matt's Script Archive MSA Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from third party informati...

CVE-2010-1856

CVE-2010-1856 affects RepairShop2 (version 1.9.023 Trial). The vulnerability is a reflected XSS in index.php, exploitable when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary script/HTML via the prod parameter in the products.details action. The connected documents con...

CVE-2009-4852

CVE-2009-4852 (and related CVEs) describes multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle prior to 0.94.1. Public records consistently cite input vectors such as the sort parameter to index.php and other unspecified vectors, enabling remote attackers to inject arbitrary sc...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Basic Analysis and Security Engine BASE, possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/baseroleadmin.php, 2 admin/baseuseradmin.php, 3 baseconfcontents.php, 4...

CVE-2010-1724

Multiple cross-site scripting XSS vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 func parameter to index.php, or the 2 lang parameter to index.php, which is not properly handled by ZLanguage.php...

CVE-2010-1703

Multiple cross-site scripting XSS vulnerabilities in indexsearch.php in 2daybiz Polls aka Advanced Poll Script allow remote attackers to inject arbitrary web script or HTML via the 1 category parameter or 2 search field...

CVE-2010-1711

Cross-site scripting XSS vulnerability in cargafotoal.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in cargafotoal.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter...

CVE-2010-1711

Cross-site scripting XSS vulnerability in cargafotoal.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter...

Cross site request forgery (csrf)

Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...

CVE-2010-0817

Cross-site scripting XSS vulnerability in layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter...

CVE-2010-1614

CVE-2010-1614 affects Moodle 1.8.x < 1.8.12 and 1.9.x

CVE-2010-1619

Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...

CVE-2010-1609: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SAP NetWeaver 2004 before SP21 and 2004s before SP13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...