CVE-2008-4892

Cross-site scripting XSS vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. NOTE: some of these details are obtained from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers to inject arbitrary web script or HTML via the hash parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4893

Affected software: Tribiq CMS 5.0.10a. Vulnerable component: templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php. Root cause: cross-site scripting when register_globals is enabled, via the template_path parameter. Impact: remote attackers can inject arbitrary web script or HTML. Exploi...

CVE-2008-4892

Cross-site scripting XSS vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. NOTE: some of these details are obtained from third party...

CVE-2008-4891

CVE-2008-4891 affects Planetluc SignMe 1.5 before 1.55. The vulnerability is a cross-site scripting (XSS) flaw in signme.inc.php that allows an attacker to inject arbitrary script or HTML via the hash parameter. Per NVD, the CVSS v2 base score is 4.3 (Medium) with network attack vector, no authen...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

CVE-2008-4756

Cross-site scripting XSS vulnerability in addprestdate.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter...

CVE-2008-4763

Multiple cross-site scripting XSS vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote attackers to inject arbitrary web script or HTML via the PHPSELF variable...

CVE-2008-4751

CVE-2008-4751 is a Cross-site Scripting (XSS) vulnerability in the file responsible for iPei Guestbook 2.0’s index.php. The issue allows remote attackers to inject arbitrary web script or HTML via the pg parameter (a vector distinct from CVE-2005-4597). The description identifies the affected com...

CVE-2008-4669

Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4661

Cross-site scripting XSS vulnerability in the Page Improvements smpageimprovements 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4629

Cross-site scripting XSS vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4629

Cross-site scripting XSS vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4542

Cross-site scripting XSS vulnerability in Cisco Unity 4.x before 4.21ES162, 5.x before 5.01ES56, and 7.x before 7.02ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database aka data store...

CVE-2008-4411

HP System Management Homepage (SMH) for Linux/Windows is vulnerable to a cross-site scripting (XSS) issue in versions before 2.1.15.210. A remote attacker can exploit unspecified vectors to inject arbitrary HTML/script in the user’s browser. This is tracked as CVE-2008-4411. HP provided a fixed r...

CVE-2008-4542: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unity 4.x before 4.21ES162, 5.x before 5.01ES56, and 7.x before 7.02ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database aka data store...

Cross site scripting

Cross-site scripting XSS vulnerability in Kantan WEB Server 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-4533: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Kantan WEB Server 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-4536: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 BetaRC 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject...

Cross site scripting

Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...