CVE-2008-6346: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the DR Wiki drwiki extension 1.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6341: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SB Universal Plugin SBuniplug extension 2.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6343: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the TU-Clausthal ODIN tucodin extension 0.0.1, 0.1.0, 0.1.1, and 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

CVE-2008-6299

CVE-2008-6299 : Joomla! 1.5.7 and earlier are affected by multiple XSS vulnerabilities . The issues allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) the title and description parameters to the com_weblinks module and (2) unspecified vectors i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid and 2 subcategoryid parameters...

CVE-2008-6278

Multiple cross-site scripting XSS vulnerabilities in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid and 2 subcategoryid parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in Libero 5.3 SP5, and possibly other versions before 5.5 SP1, allows remote attackers to inject arbitrary web script or HTML via the search term field...

CVE-2008-6267

Cross-site scripting XSS vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2008-6259

Cross-site scripting XSS vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in pagesUTF8/auftragallgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the 1 QUB and 2 Bez74 parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the user parameter to login.php or 2 the dbfield parameter to filter.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-6238

The CVE-2008-6238 entry describes a Cross-site Scripting (XSS) vulnerability in OpenEdit Digital Asset Management (DAM) prior to version 5.2014. The flaw resides in archive/savedqueries/savequeryfinish.html where an attacker can inject arbitrary web script or HTML via the name parameter. The issu...

CVE-2008-6238

Cross-site scripting XSS vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the 1 selmese and 2 selanno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-6211

The CVE-2008-6211 issue affects PhpForums.net mcGallery 1.1 and involves multiple XSS vulnerabilities. Arbitrary web script or HTML could be injected through the lang parameter to seven pages (admin.php, index.php, sess.php, stats.php, detail.php, resize.php, show.php). The root cause is reflecte...

CVE-2008-6211

Multiple cross-site scripting XSS vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to 1 admin.php, 2 index.php, 3 sess.php, 4 stats.php, 5 detail.php, 6 resize.php, and 7 show.php. NOTE: the provenance of this...

CVE-2008-6212

Cross-site scripting XSS vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the 1 selmese and 2 selanno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...