CVE-2005-0480

CVE-2005-0480 is a cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier. The issue arises from accepting a login request that is recorded in a log file but not properly sanitized when an administrator views the log, allowing remote attackers to inject arbitrary HTML or web scri...

CVE-2005-0477

The CVE-2005-0477 entry describes a Cross-site scripting (XSS) vulnerability in the SML code of Invision Power Board 1.3.1 FINAL. The issue can be triggered by crafted content in (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:u...

CVE-2005-0476: Undefined Security Weakness

Cross-site scripting XSS vulnerability in hpmguestbook.cgi allows remote attackers to inject arbitrary web script or HTML by posting a message...

CVE-2005-0462: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter...

CVE-2005-0434

Multiple cross-site scripting XSS vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via 1 the newdownloadshowdays parameter in a NewDownloads operation or 2 the newlinkshowdays parameter in a NewLinks operation...

CVE-2005-0434

Multiple cross-site scripting XSS vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via 1 the newdownloadshowdays parameter in a NewDownloads operation or 2 the newlinkshowdays parameter in a NewLinks operation...

CVE-2005-0412

CVE-2005-0412 is an XSS vulnerability in Spidean PostWrap that allows remote attackers to inject arbitrary HTML and web script via the page parameter. Public references confirm the issue exists, with CVSSv2 base score 6.8 (MEDIUM) and impact partial confidentiality, integrity, and availability. T...

CVE-2004-1441

Cross-site scripting XSS vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2005-0374

CVE-2005-0374 affects BiTBOARD (2.5 and earlier). The issue is a cross-site scripting (XSS) vulnerability exploitable via an [img] bbcode image tag with an event (e.g., mouseover). Documented impact includes potential cookie theft and partial integrity impact on affected pages. Remediation shown ...

CVE-2005-0378

Multiple cross-site scripting XSS vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter to prefs.php or 2 url parameter to index.php...

CVE-2004-1397

CVE-2004-1397 affects UseModWiki 1.0 and is caused by a vulnerability in the CGI script wiki.pl that allows remote attackers to execute arbitrary script/HTML via an argument. The impact noted in sources is partial integrity loss with no confidentiality or availability impact per the CVSS vector, ...

CVE-2004-1397

Cross-site scripting XSS vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via an argument to wiki.pl...

CVE-2004-1424

Cross-site scripting XSS vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2004-1418

CVE-2004-1418 affects WPKontakt 3.0.1 and earlier. The vulnerability is a cross-site scripting (XSS) flaw where an e-mail address is not quoted during a parsing error, allowing an attacker to inject arbitrary web script or HTML. Documented impact indicates partial integrity compromise with no con...

CVE-2005-0309

Multiple cross-site scripting XSS vulnerabilities in 1 index.php or 2 mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter...

CVE-2005-0314

Cross-site scripting XSS vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields...

CVE-2005-0307

Multiple cross-site scripting XSS vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 s, 2 l, 3 a, 4 t, 5 to, or 6 re parameters...

CVE-2005-0307

MercuryBoard 1.1.1 is affected by CVE-2005-0307 due to multiple XSS in index.php, allowing remote injection of arbitrary script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters. The vulnerability is documented in CVE records and corroborated by OpenVAS noting multiple vuln...

CVE-2005-0264

Multiple cross-site scripting XSS vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 expand or 2 order parameter...

CVE-2005-0219

Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...