CVE-2008-2206

Multiple cross-site scripting XSS vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter in a search action to index.php, and the 2 msgscript parameter to admin/inc/footer.php...

CVE-2008-2210: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 msgscript, 2 msgscript2, and 3 msgscript3 parameters to admin/inc/footer.php; and the 4 msgscript2 parameter to admin/inc/header.php...

CVE-2008-2213: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/inc/footer.php in Maian Links 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 msgscript2 and 2 msgscript3 parameters...

CVE-2008-2212: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 msgadminheader, 2 msgadminheader2, 3 msgadminheader3, 4 msgadminheader4, and unspecified other parameters to admin/inc/header.php; the 5 msgscript3 and...

CVE-2008-2211: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 msgscript2 and 2 msgscript3 parameters...

maianlinks-xss.txt

---------------------------------------------------------------- Script : Maian Links v3.1 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...