CVE-2008-1251

Cross-site scripting XSS vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used, allows remote attackers to inject arbitrary web script or HTML via the dyndnsdomain parameter to the default URI...

CVE-2008-1243

Cross-site scripting XSS vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used, allows remote attackers to inject arbitrary web script or HTML via the dyndnsdomain parameter to the default URI...

Cross site scripting

Cross-site scripting XSS vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script or HTML via 1 the type parameter in calendar.php and 2 the category parameter in calendarsearch.php. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2008-1204

Multiple cross-site scripting XSS vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 Help and 2 Version windows...

CVE-2003-1546

Cross-site scripting XSS vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the comment section...

CVE-2008-1179

Multiple cross-site scripting XSS vulnerabilities in include/common/javascript/colorpicker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 title parameters. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...

CVE-2008-1098

Removed by vendor...

Cross site scripting

Cross-site scripting XSS vulnerability in Drupal 6.0 allows remote authenticated users to inject arbitrary web script or HTML via titles in content edit forms...

CVE-2008-1131

Cross-site scripting XSS vulnerability in Drupal 6.0 allows remote authenticated users to inject arbitrary web script or HTML via titles in content edit forms...

CVE-2008-1073

Cross-site scripting XSS vulnerability in the report interface in Internet Security Systems ISS Internet Scanner 7.0 Service Pack 2 Build 7.2.2005.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-1076

Cross-site scripting XSS vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Serendipity S9Y before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via 1 the "Real name" field in Personal Settings, which is presented to readers of articles; or 2 a file upload, as demonstrated by a .htm, .html, or...

CVE-2008-1061

Multiple cross-site scripting XSS vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to a warning.php, b notice.php, and c inset.php in view/sniplets/, and possibly d modules/execute.php; the ...

CVE-2008-1061

Multiple cross-site scripting XSS vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to a warning.php, b notice.php, and c inset.php in view/sniplets/, and possibly d modules/execute.php; the ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Spyce - Python Server Pages PSP 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the url or type parameter to docs/examples/redirect.spy; 2 the x parameter to docs/examples/handlervalidate.spy; 3 the name parameter to...

CVE-2008-0980

Multiple cross-site scripting XSS vulnerabilities in Spyce - Python Server Pages PSP 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the url or type parameter to docs/examples/redirect.spy; 2 the x parameter to docs/examples/handlervalidate.spy; 3 the name parameter to...

Cross site scripting

Cross-site scripting XSS vulnerability in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event...