7605 matches found
CVE-2009-2780
Multiple cross-site scripting XSS vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to category.php, view parameter to 2 login.php and 3 viewlisting.php, page parameter to 4 searchresults.php and 5 toplistings.php, and 6...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to 1 quicksearch.php and 2 viewprofile.php...
CVE-2009-2772
Multiple cross-site scripting XSS vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to 1 quicksearch.php and 2 viewprofile.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...
CVE-2008-6946
Cross-site scripting XSS vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php...
CVE-2009-2739
Cross-site scripting XSS vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2008-6924
Multiple cross-site scripting XSS vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 email, 3 password, 4 password2, 5 securitycode, and 6 register parameters...
CVE-2008-6927
The CVE-2008-6927 entry describes multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php of the Fantastico De Luxe Module for cPanel. An attacker can inject arbitrary web script or HTML through the parameters (localapp, updatedir, scriptpath_show, domain_show,...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fName and 2 fPassword parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...
Cross site scripting
Cross-site scripting XSS vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via the title field...
CVE-2008-6876
Cross-site scripting XSS vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037...
CVE-2009-2586
Cross-site scripting XSS vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitrary web script or HTML via the title parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Perl CGI's By Mrs. Shiromuku shiromukufs6DIARY 2.40 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-2565: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Perl CGI's By Mrs. Shiromuku shiromukufs6DIARY 2.40 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-2480
CVE-2009-2480 is an XSS in Movable Type’s mt-wizard.cgi affecting versions 4.24 and 4.25 when global templates are not initialized. The vulnerability arises from unsanitized input in the set_static_uri_to parameter, enabling a remote attacker to inject arbitrary script or HTML. Nessus NASL notes ...
Cross site scripting
Cross-site scripting XSS vulnerability in ogpshow.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the searchchoice parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-2447
Multiple cross-site scripting XSS vulnerabilities in ogpshow.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 display parameter...