7605 matches found
CVE-2005-3759
Multiple cross-site scripting XSS vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 gzip/tar and 2 css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments...
CVE-2005-3745
Cross-site scripting XSS vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message...
CVE-2003-1285
Multiple cross-site scripting XSS vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 isapi/testisa.dll, 2 testcgi.exe, 3 environ.pl, 4 the query parameter to samples/search.dll, 5 the price parameter to...
CVE-2004-2550
Multiple cross-site scripting XSS vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data...
CVE-2005-3528
Cross-site scripting XSS vulnerability in tiki-viewforumthread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the topicsoffset parameter...
CVE-2005-3530: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Antville 1.1 allows remote attackers to inject arbitrary web script or HTML via the notfound.skin error document...
CVE-2005-3638
Cross-site scripting XSS vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in profile.php and 2 titles of posts...
CVE-2005-3638
Affected software: Ekinboard 1.0.3. Vulnerability: Cross-site scripting (XSS) via (1) id parameter in profile.php and (2) post titles. Impact: allows remote attackers to inject arbitrary web script or HTML. Exploitation/Details: Documented in CVE-2005-3638 with confirmed vectors on profile and po...
CVE-2005-3570
Unspecified cross-site scripting XSS vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages"...
CVE-2005-3479
Cross-site scripting XSS vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter...
CVE-2005-3436
Cross-site scripting XSS vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the 1 Search module, 2 certain edit fields in Guestbook, 3 the title in the Forum module, and 4 Textbox...
CVE-2005-3413
Cross-site scripting XSS vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the motd parameter...
CVE-2005-3412
Cross-site scripting XSS vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via a Post Reply to a topic, in which the reply contains a javascript: URL in an tag...
CVE-2005-3425: Undefined Security Weakness
Cross-site scripting XSS vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2005-3424...
CVE-2005-3406: Undefined Security Weakness
Cross-site scripting XSS vulnerability in phpESP 1.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2005-3361
Cross-site scripting XSS vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306...
CVE-2005-3334
Cross-site scripting XSS vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 devel allows remote attackers to inject arbitrary web script or HTML via the 1 PHPSESSID, 2 task, 3 string, 4 type, 5 serv, 6 due, 7 dev, and 8 sort2 parameters...
CVE-2005-3329
Cross-site scripting XSS vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operation...
CVE-2005-3308
Multiple cross-site scripting XSS vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 comment parameter in detail.php, 3 the username parameter in get.php, and 4 the search parameter in index.php...