CVE-2008-6096

Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...

CVE-2008-6087

CVE-2008-6087 describes a cross-site scripting (XSS) vulnerability in the Camera Life application, specifically in topic.php of version 2.6.2b4, exploitable via the name parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The provided connected documents c...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...

Cross site scripting

Cross-site scripting XSS vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote attackers to inject arbitrary web script or HTML via the atknodetype parameter...

CVE-2008-6044

Cross-site scripting XSS vulnerability in advancedsearchresult.php in xt:Commerce 3.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter...

CVE-2008-5971

Cross-site scripting XSS vulnerability in profilesocial.php in i-Net Solution Orkut Clone allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...

CVE-2008-5971: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in profilesocial.php in i-Net Solution Orkut Clone allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...

PT-2009-2928

Name of the Vulnerable Software and Affected Versions MoinMoin versions prior to 1.8.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component. This can be achieved by exploiting the rename parameter or the drawing...

CVE-2009-0245: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4629...

CVE-2009-0026

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

Cross site scripting

Cross-site scripting XSS vulnerability in the XSS filter framework/TextFilter/Filter/xss.php in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes...

CVE-2008-5917

Cross-site scripting XSS vulnerability in the XSS filter framework/TextFilter/Filter/xss.php in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes...

GLSA-200901-08 : Online-Bookmarks: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200901-08 Online-Bookmarks: Multiple vulnerabilities The following vulnerabilities were reported: Authentication bypass when directly requesting certain pages CVE-2004-2155. Insufficient input validation in the login function in...

Cross site scripting

Cross-site scripting XSS vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web script or HTML via the action parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2008-5869: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID...

CVE-2008-5854

Multiple cross-site scripting XSS vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lsuser and 2 lsemail parameters aka the User form in an lsregister action. NOTE: some of these details are obtained from third...

CVE-2008-5854

CVE-2008-5854 affects myPHPscripts Login Session 2.0: vulnerable is login.php in the User form (ls_user, ls_email) during an ls_register action, enabling stored/reflective XSS by remote attackers to inject arbitrary web script/HTML. The NVD entry confirms the vulnerability and its CVSS base metri...