6892 matches found
CVE-2008-2567
Cross-site scripting XSS vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search...
CVE-2008-2553
Cross-site scripting XSS vulnerability in Slashdot Like Automated Storytelling Homepage Slash aka Slashcode R25094 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter...
CVE-2008-1947
Cross-site scripting XSS vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter aka the hostname attribute to host-manager/html/add...
Cross site scripting
Cross-site scripting XSS vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter aka the hostname attribute to host-manager/html/add...
CVE-2008-2533
Multiple cross-site scripting XSS vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ltarget parameter to a admin/adminframe.php and the 2 conf parameter to b gbuch.admin.php, c links.admin.php, d menue.admin.php, e...
CVE-2008-2527
Cross-site scripting XSS vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...
Cross site scripting
Cross-site scripting XSS vulnerability in the search script in Build A Niche Store BANS 3.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ltarget parameter to a admin/adminframe.php and the 2 conf parameter to b gbuch.admin.php, c links.admin.php, d menue.admin.php, e...
CVE-2008-2527
Cross-site scripting XSS vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...
Cross site scripting
Cross-site scripting XSS vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the CalendarName parameter in a ShowIt action...
Cross site scripting
Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the KJ Image Lightbox 2 aka kjimagelightbox2 extension 1.4.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified "user input."...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Statistics aka kestats extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in profile.php in Web Group Communication Center WGCC 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a show action...
CVE-2008-2445
Cross-site scripting XSS vulnerability in profile.php in Web Group Communication Center WGCC 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a show action...
CVE-2008-2445
Cross-site scripting XSS vulnerability in profile.php in Web Group Communication Center WGCC 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a show action...
CVE-2008-2302
Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web GUI in SAP Web Application Server WAS 7.0, Web Dynpro for ABAP aka WD4A or WDA, and Web Dynpro for BSP allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under bc/gui/sap/its/webgui/...
CVE-2008-2302
Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...