CVE-2006-6188

Cross-site scripting XSS vulnerability in viewsearch.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6174

Cross-site scripting XSS vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in 1 tdiary.rb and 2 skel/conf.rhtml...

CVE-2006-6162

Cross-site scripting XSS vulnerability in tiki-editstructures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the pageAlias parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6148

Multiple cross-site scripting XSS vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the 1 lName, 2 lURL, 3 lImage, and 4 lDescription parameters. NOTE: some of these details are obtained from third party information...

CVE-2006-6087

Cross-site scripting XSS vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2006-6091

Cross-site scripting XSS vulnerability in Grim Pirate GrimBB before 20061121 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6088

Multiple cross-site scripting XSS vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 n or 2 d parameter in igallery.asp, or 3 an unspecified parameter related to search, possibly the Search Gallery field, or the myquery parameter, i...

CVE-2006-6032

Multiple cross-site scripting XSS vulnerabilities in Simple PHP Blog SPHPBlog, probably 0.4.8, allow remote attackers to inject arbitrary web script or HTML via 1 the action parameter in addblock.php or 2 the entry parameter in index.php, different vectors than CVE-2005-1135. NOTE: this has been...

CVE-2006-5985

Multiple cross-site scripting XSS vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 bg1, 2 bg2, 3 text, or 4 size parameters. NOTE: the provenance of this information is unknown; details are...

CVE-2006-5942

Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...

CVE-2006-5944

Cross-site scripting XSS vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager CSM allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-5830

Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topid, 2 forid, and 3 catid parameters to code/cpforumview.php; 4 choosedlanguage parameter to cpdpage.php; 5 orderdir...

CVE-2006-5800

Cross-site scripting XSS vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-5800

Cross-site scripting XSS vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-5761

Cross-site scripting XSS vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject arbitrary web script or HTML via the rns parameter...

CVE-2006-5770

Multiple cross-site scripting XSS vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via 1 Bloks, 2 Newnews, 3 lBlok, and 4 foooot parameter in a index.php; Newnews, 5 newmsgs, and Bloks parameter in b MobileNews.php; Newnews parameter in c polls.php; 6...

CVE-2006-5741

Multiple cross-site scripting XSS vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via 1 the 404 error page of the Smart Sensor Edge Sensor; 2 the user name for a failed logon, when displayed in the audit journals reviewin...

CVE-2006-5742

The AirMagnet Enterprise console and Remote Sensor console Laptop in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template value, aka "Cross-Application Scripting XAS"...

CVE-2006-5703

Cross-site scripting XSS vulnerability in tiki-featuredlink.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades filtering, as demonstrated by a parameter value containing malformed, nested SCRIPT elements...

CVE-2006-5713

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 author, 2 content, or 3 title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtain...