8 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the author name in a comment...
CVE-2015-8831
Cross-site scripting XSS vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the author name in a comment...
CVE-2015-8831: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the author name in a comment...
PT-2017-7487
Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.8.2 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the author name in a comment. Recommendations For versions prior to 2.8.2,...
CVE-2012-1039
Multiple cross-site scripting XSS vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 logindata parameter to admin/auth.php; 2 nb parameter to admin/blogs.php; 3 type, 4 sortby, 5 order, or 6 status parameters to admin/comments.php; or ...
CVE-2012-1039: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 logindata parameter to admin/auth.php; 2 nb parameter to admin/blogs.php; 3 type, 4 sortby, 5 order, or 6 status parameters to admin/comments.php; or ...
CVE-2008-7039: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/comments.php in Gelato CMS 0.95 allows remote attackers to inject arbitrary web script or HTML via the content parameter in a comment. NOTE: some of these details are obtained from third party information...
CVE-2006-6046: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 edit parameter to a admin/articles.php or b admin/comments.php, or the 2 add parameter to admin/users.php...