6892 matches found
CVE-2006-2294
Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the fields in a user's profile...
CVE-2006-2294
Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...
CVE-2006-2243
Multiple cross-site scripting XSS vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 comentarii.php or 2 view.php. NOTE: this issue might be resultant from SQL injection...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in easyEvent 1.2 allows remote attackers to inject arbitrary web script or HTML via the curryear parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, allow remote attackers to inject arbitrary web script or HTML via the 1 user, 2 story, or 3 title parameters...
CVE-2006-2260
Cross-site scripting XSS vulnerability in the project module project.module in Drupal 4.5 and 4.6 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
Cross site scripting
Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2243
The vulnerability CVE-2006-2243 affects Web4Future News Portal and involves stored/reflected XSS by manipulating the ID parameter in two pages, comentarii.php and view.php. The root cause is insufficient input validation that allows arbitrary script/HTML injection, enabling remote attackers to ex...
CVE-2006-2252
Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2006-2228
Cross-site scripting XSS vulnerability in w-Agora aka Web-Agora 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' equals character, which bypasses a restrictive regular...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 site, 3 city, 4 state, 5 country, and possibly 6 name fields, which are viewed via viewguest.cgi...
CVE-2006-2232
Cross-site scripting XSS vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML via the Comments field when signing the guestbook...
Cross site scripting
Cross-site scripting XSS vulnerability in w-Agora aka Web-Agora 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' equals character, which bypasses a restrictive regular...
CVE-2006-2228
Cross-site scripting XSS vulnerability in w-Agora aka Web-Agora 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' equals character, which bypasses a restrictive regular...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this issue might be resultant from the directory traversal vulnerability...
CVE-2006-2208
Multiple cross-site scripting XSS vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 hash and 2 page parameters...
CVE-2006-2210
Cross-site scripting XSS vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this issue might be resultant from the directory traversal vulnerability...
CVE-2006-2188
Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...