CVE-2003-1554: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the 1 username, 2 useremail, 3 aim, 4 msn, 5 sitename and 6 siteaddy variables...

CVE-2008-1485

Cross-site scripting XSS vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the gethost parameter to moderate.php...

CVE-2008-0125

CVE-2008-0125 describes a cross-site scripting (XSS) vulnerability in phpstats.php of Michael Wagner’s phpstats 0.1 alpha, exploitable via the baseDir parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Public sources consistently identify phpstats 0.1_alpha as th...

Cross site scripting

Cross-site scripting XSS vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the "correctiv...

CVE-2008-1476: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Serendipity S9Y before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7 module for Drupal allow remote attackers to inject arbitrary web script or HTML via a text attribute value for a product...

CVE-2008-1399

Multiple cross-site scripting XSS vulnerabilities in index.php in Clansphere 2008 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1413

Cross-site scripting XSS vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2008-1399

Multiple cross-site scripting XSS vulnerabilities in index.php in Clansphere 2008 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-4592

Multiple cross-site scripting XSS vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 Patch 2008A, 7.0.0.2iFix01, and 7.0.1.1iFix01 allow remote attackers to inject arbitrary web script or HTML via the 1 contextid, 2 username, 3 userNameVal, and 4 schema parameters ...

CVE-2008-1355

Cross-site scripting XSS vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9.60 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2008-1355

CVE-2008-1355 describes a Cross-site scripting (XSS) vulnerability in the Jeebles Directory 2.9.60, specifically in index.php where the attacker can inject arbitrary web script or HTML via the path parameter. The issue is caused by improper handling of the path parameter, allowing remote code exe...

CVE-2008-1342

Multiple cross-site scripting XSS vulnerabilities in the search feature in Polymita BPM-Suite and CollagePortal allow remote attackers to inject arbitrary web script or HTML via the 1 q and 2 luceneindexfieldvalue parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1345

CVE-2008-1345 affects MyioSoft EasyCalendar (plugins/calendar/calendar_backend.php) up to version 4.0tr and earlier. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the day parameter in a dayview action, allowing remote attackers to inject arbitrary web script or HTML. The ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediate...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1326

Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0643: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-1202: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Forms/DiagGeneral2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter...