6892 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
CVE-2006-1096
Cross-site scripting XSS vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate...
CVE-2006-1110
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
CVE-2006-1106
Cross-site scripting XSS vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 message, 2 name, 3 url, and 4 email parameters when commenting on a post. NOTE: the vendor has disputed some issues from the original disclosure, but...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter and 2 other unspecified parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...
CVE-2006-1077
Multiple cross-site scripting XSS vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter and 2 other unspecified parameters...
CVE-2006-1072
Cross-site scripting XSS vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post...
Cross site scripting
Cross-site scripting XSS vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post...
CVE-2006-1070
Cross-site scripting XSS vulnerability in dvgbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the f parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Woltlab Burning Board wBB allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter to galerieindex.php and possibly 2 galerieonfly.php. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arbitrary web script or HTML via 1 uname, 2 error, 3 profile or 4 the username filed parameter to the a YourAccount module, 5 catid, 6 sid, 7 Story Text or 8 Extended text text field...
Cross site scripting
Cross-site scripting XSS vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a BBCode url tag when using the showpost function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Cross site scripting
Cross-site scripting XSS vulnerability in solmenu.php in PeHePe Uyelik Sistemi aka PeHePe MemberShip Management System 3 allows remote attackers to inject arbitrary web script or HTML via the kuladi parameter $kuladi variable...
Cross site scripting
Cross-site scripting XSS vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote attackers to inject arbitrary web script or HTML via the ShipMethod parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 dir and 2 pageid parameter to a index.php and 3 userid parameter to b mailto.php. NOTE: it is possible that issues 1 and 2 are resultant from SQL injectio...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in 1 index.cgi and 2 viewday.cgi...
WordPress <= 2.0.1 - Multiple XSS
Because of these vulnerabilities, attackers can inject arbitrary web script or HTML via the name, website, and comment parameters. Solution Update the WordPress to the latest available version at least 2.0.2...