CVE-2008-0909

Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0909

Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0899

Cross-site scripting XSS vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page...

DSA-1502-1 wordpress - multiple vulnerabilities

Bulletin has no description...

Cross site scripting

Cross-site scripting XSS vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message...

CVE-2008-0848

Cross-site scripting XSS vulnerability in lostsheep.php in Crafty Syntax Live Help CSLH before 2.14.16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the versions claimed by the original researcher are probably incorrect...

CVE-2008-0793

CVE-2008-0793 describes multiple cross-site scripting (XSS) vulnerabilities in Tendenci CMS, specifically in the search.asp endpoint. The vulnerabilities allow remote attackers to inject arbitrary web script/HTML via parameters such as category, searchtext, jobcategoryid, contactcompany, and othe...

CVE-2008-0783

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via 1 the viewtype parameter to graph.php; 2 the filter parameter to graphview.php; 3 the action parameter to the drawnavigationtext...

CVE-2008-0780: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action...

CVE-2008-0775: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "", contain the desired script, and end with ";"...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter in a pagetoolsearch action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2008-0723

CVE-2008-0723 describes a cross-site scripting (XSS) vulnerability in the PHP component mynews.inc.php used by MyNews 1.6.4 and earlier 1.6.x. The issue allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php. The entry explicitly note...

CVE-2008-0676

Cross-site scripting XSS vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...

CVE-2008-0669

The CVE-2008-0669 entry describes an XSS vulnerability in the search.cgi component of Sift Unity, exploitable by supplying arbitrary script/HTML through the qt parameter. Root cause: lack of proper input sanitization for qt in search.cgi. Impact: remote attackers can inject script in victims’ bro...

CVE-2008-0684

Cross-site scripting XSS vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter...

CVE-2008-0688

Cross-site scripting XSS vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action...

EUVD-2008-0190

Cross-site scripting XSS vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the User-Agent HTTP header...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 open and 2 dateshow parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...