7605 matches found
CVE-2008-3510
Cross-site scripting XSS vulnerability in livehelpjs.php in Crafty Syntax Live Help CSLH 2.14.6 allows remote attackers to inject arbitrary web script or HTML via the department parameter...
CVE-2008-3510
Cross-site scripting XSS vulnerability in livehelpjs.php in Crafty Syntax Live Help CSLH 2.14.6 allows remote attackers to inject arbitrary web script or HTML via the department parameter...
CVE-2008-3511
CVE-2008-3511 affects Softbiz Image Gallery (Photo Gallery). It describes multiple cross-site scripting (XSS) vulnerabilities that permit remote attackers to inject arbitrary script or HTML via the latest parameter to index.php, images.php, suggest_image.php, and image_desc.php; and via the msg p...
Cross site scripting
Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...
CVE-2008-3397
CVE-2008-3397 affects Runesoft Cerberus CMS up to version 3_1.4_0.9. It is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the cerberus_user cookie. Impact is limited to the attacker’s ability to execute scripts in the victim’s browser; no explic...
CVE-2008-3394
CVE-2008-3394 : In BookMine, multiple cross-site scripting (XSS) vulnerabilities exist in the web app’s search.cfm. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters. Root cause: insufficient input validation/sanitization...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in macro/AdvancedSearch.py in moin and MoinMoin 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3353
Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...
CVE-2008-3353
CVE-2008-3353 affects Pure Software Lore, prior to version 1.7.0. The Connected PT-2008-4758 entry documents multiple cross-site scripting (XSS) vulnerabilities in the article comments feature and the search log feature, allowing remote attackers to inject arbitrary web script or HTML. Root cause...
CVE-2008-3340
CVE-2008-3340 is an XSS vulnerability in Jobbex JobSite’s search_result.cfm, exploitable via the searchFor parameter (potentially the opt parameter). Affected component: Jobbex JobSite web search results; root cause: improper handling of input leading to script/HTML injection. Impact per availabl...
CVE-2008-3342
Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edpNews action...
CVE-2008-3334
Summary (CVE-2008-3334) : A cross‑site scripting (XSS) vulnerability exists in MyBB 1.2.x prior to 1.2.14 . The issue arises from insufficient input validation in certain parameters handled by the search path (likely including search.php), allowing remote attackers to inject arbitrary script/HTML...
CVE-2008-3331
CVE-2008-3331 is a cross-site scripting (XSS) vulnerability in MantisBT (Mantis Bug Tracker). The flaw resides in the code path for the page return_dynamic_filters.php, where the filter_target parameter is not properly sanitized. An attacker can remotely inject arbitrary HTML/JavaScript that exec...
CVE-2008-3328
Cross-site scripting XSS vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2008-3316
Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...
CVE-2008-3315
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...
CVE-2008-3301
CVE-2008-3301 concerns BilboBlog 0.2.1, with multiple XSS flaws. The vulnerabilities originate from conflicting code in widget.php and affect several entry points: admin/update.php (content), head.php (titleId), footer.php (t_lang[lang_copyright]), admin/ default URI (content), admin/homelink.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via 1 the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to 2 announcements/announcements.php, 3 calendar/agenda.php, 4...
CVE-2008-3255: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...