7605 matches found
CVE-2007-4192: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in IDE Group DVD Rental System DRS 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application servi...
CVE-2007-4144
Cross-site scripting XSS vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the basepath parameter, possibly related to 1 formprocessorpro.php ...
CVE-2007-4144
CVE-2007-4144 affects MitriDAT eMail Form Processor Pro, specifically the sample-forms/simple-contact-form-with-preview.html page. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through the base_path parameter, with possi...
CVE-2007-4080
Cross-site scripting XSS vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the pid parameter in a peoplecard action. NOTE: this might overlap CVE-2006-2564...
CVE-2007-4080
The CVE-2007-4080 entry documents a cross-site scripting (XSS) vulnerability in the AlstraSoft E-Friends application, specifically in index.php. The issue is triggered via the p_id parameter in the people_card action, enabling remote attackers to inject arbitrary web script or HTML. Affected comp...
CVE-2007-4052
CVE-2007-4052 describes a cross-site scripting (XSS) vulnerability in nukedit 4.9.7 and earlier, located in utilities/login.asp. The issue allows remote attackers to inject arbitrary web script or HTML via the email parameter. The provided documents consistently identify the affected component an...
CVE-2007-4048
Cross-site scripting XSS vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2007-4064: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4.7.7, 1 allow remote attackers to inject arbitrary web script or HTML via "some server variables," including PHPSELF; and 2 allow remote authenticated administrators to inject arbitrary web script or HTM...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user and 2 pwd parameters...
CVE-2007-4024
Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-4023: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-3989
Multiple cross-site scripting XSS vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the 1 Adiniz and 2 Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance...
CVE-2007-3989
Multiple cross-site scripting XSS vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the 1 Adiniz and 2 Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance...
CVE-2007-3975
Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...
CVE-2007-3383
Cross-site scripting XSS vulnerability in SendMailServlet in the examples web application examples/jsp/mail/sendmail.jsp in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, relat...
CVE-2007-3941
Cross-site scripting XSS vulnerability in profile.php in Jasmine CMS 1.01 allows remote authenticated users to inject arbitrary web script or HTML via the profileemail parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in mesajformu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Isim, 2 Mesajiniz, and 3 E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php...
Cross site scripting
Cross-site scripting XSS vulnerability in default.asp in Element CMS allows remote attackers to inject arbitrary web script or HTML via the s parameter in a search pID action...
CVE-2007-3885
Cross-site scripting XSS vulnerability in philboardsearch.asp in husrevforum 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...