6892 matches found
CVE-2008-6683
Cross-site scripting XSS vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject arbitrary web script or HTML via the r parameter...
CVE-2008-6700
Multiple cross-site scripting XSS vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 mytable parameter to view.php, 2 mytable parameter to viewdb2.php, 3 tablehere parameter to category-rename.php, and 4 letter parameter to...
CVE-2008-6688
Cross-site scripting XSS vulnerability in JobControl dmmjobcontrol 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to 1 servlet/com.threeis.webta.H710selProject and 2 servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial repo...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the close parameter to showThumb.aspx; 2 SBredirect and 3 SBfeedback parameters in processsend.asp, as reachable through default.asp; 4 paramCode and 5 cColor...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...
CVE-2009-1261
Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the 1 school and 2 email parameters...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in CoronaMatrix phpAddressBook 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2008-6631
Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...
Cross site scripting
Cross-site scripting XSS vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary web script or HTML via the thema parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...
CVE-2009-1228
Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...
CVE-2009-1228
Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances ASA 5520 with software 7.2430 and earlier 7.2 versions including 7.2222, and 8.0428 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject...
Cross site scripting
Cross-site scripting XSS vulnerability in jaxlinklists.php in Jack tR Jax LinkLists 1.00 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-6570
Cross-site scripting XSS vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
CVE-2008-6550
Cross-site scripting XSS vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter...