Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 newinput, 2 newurl, or 3 newname parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the...

Cross site scripting

Cross-site scripting XSS vulnerability in ow-shared.pl in OpenWebMail OWM 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in 1 openwebmail-send.pl, 2 openwebmail-advsearch.pl, 3 openwebmail-folder.pl, 4 openwebmail-prefs.pl, 5...

CVE-2006-2181

Multiple cross-site scripting XSS vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 cid parameter to dlisting.php or 2 preloadSlideShow parameter to showpic.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/serverdaystats.php in Virtual Hosting Control System VHCS allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, or 3 year parameter...

CVE-2006-2165

Multiple cross-site scripting XSS vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter in a storespecialoffers.php and b store.php and 2 prodid parameter in c productinfo.php. NOTE: this issue might...

CVE-2006-2167

Cross-site scripting XSS vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element...

CVE-2006-2160

Cross-site scripting XSS vulnerability in Russcom Network Loginphp Russcom.Loginphp allows remote attackers to inject arbitrary web script or HTML via the username field when registering...

CVE-2006-2109

Cross-site scripting XSS vulnerability in the parsequerystr function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly other versions before 2.0.12, allows remote attackers to inject arbitrary web script or HTML via parameters that are set as global variables within the program, as...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the 1 referral parameter to signup.php or 2 id parameter to members.php...

Cross site scripting

Cross-site scripting XSS vulnerability in popupimage in Collaborative Portal Server CPS 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument...

CVE-2006-2141

Cross-site scripting XSS vulnerability in popupimage in Collaborative Portal Server CPS 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument...

CVE-2006-2140

Multiple cross-site scripting XSS vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the 1 referral parameter to signup.php or 2 id parameter to members.php...

CVE-2006-2141

Cross-site scripting XSS vulnerability in popupimage in Collaborative Portal Server CPS 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SunShop 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 prevaction, 2 previd, 3 prevstart, 4 itemid, 5 id, and 6 action parameters in index.php...

CVE-2006-2106

Cross-site scripting XSS vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a "wiki macro."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kamgaing Email System kmail 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 d parameter to main.php, ordner parameter to 2 main.php, or 3 webdisk.php, 4 draft parameter to compose.php, or 5 m, or 6 y...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities pmpopup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 u1, 2 m1, 3 m2, 4 m3, 5 m4 parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 port, 2 server, and 3 user parameters. NOTE: it is possible that the affected version is actually 3.2...