7605 matches found
CVE-2008-4532
CVE-2008-4532 describes a reflected cross-site scripting vulnerability in MaxiScript Website Directory: index.php, exploitable via the keyword parameter in a search action. The flaw stems from improper handling of user input, allowing injection of arbitrary HTML/JavaScript. Impact: could enable a...
CVE-2008-4481
Cross-site scripting XSS vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-4481: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via 1 the fn parameter during a dload action, 2 the mask parameter during a search action, and 3 the tab parameter during a sysinfo...
CVE-2008-4446: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-4435
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter...
CVE-2008-4435
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...
Cross site scripting
Cross-site scripting XSS vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter flavour variable. NOTE: some of these details are obtained from third party information...
CVE-2008-4408: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions before 1.13.2 allows remote attackers to inject arbitrary web script or HTML via the useskin parameter to an unspecified component...
CVE-2008-4370
Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...
Cross site scripting
Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 page parameter in a details action...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via 1 the jusername parameter to jacegisecuritycheck, 2 the username parameter to notification/list.jsp, and 3 the filter parameter to event/list...
CVE-2008-3098
Cross-site scripting XSS vulnerability in admin/usercheck.php in fuzzylime cms before 3.03 allows remote attackers to inject arbitrary web script or HTML via the user parameter to the login form...
CVE-2008-4174
Multiple cross-site scripting XSS vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 currentpath, 2 invert, 3 search, and 4 sort parameters...
CVE-2008-4179
NooMS 1.1 is affected by CVE-2008-4179 through two reflected XSS vectors: in smileys.php via the page_id parameter and in search.php via the q parameter. The connected records confirm the vulnerability class (XSS) and the affected components, but do not provide explicit patch versions, remediatio...
CVE-2008-4168
The CVE-2008-4168 entry describes a Cross-site scripting (XSS) vulnerability in Pro2col Stingray FTS, specifically in verify_login.jsp, exploitable via the form_username field (the user name). The underlying cause is an input handling flaw that allows injection of arbitrary web script or HTML. Af...