CVE-2005-4400

Cross-site scripting XSS vulnerability in downloads/portalent in Liferay Portal Enterprise 3.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 77strutsaction, 2 ppmode, and 3 ppstate parameters...

CVE-2005-4369

Cross-site scripting XSS vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp...

CVE-2005-4374

Multiple cross-site scripting XSS vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to faq.asp and 2 searchQuery parameter to search.asp...

CVE-2005-4381

Multiple cross-site scripting XSS vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 fileDN and 2 folderviewerattrs parameters...

CVE-2005-4386

Cross-site scripting XSS vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4377

Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...

CVE-2005-4379

Multiple cross-site scripting XSS vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the 1 sortmode parameter to a fisheye/listgalleries.php, b messages/messagebox.php, and c users/my.php; the 2 postid parameter to d blogs/viewpost.ph...

CVE-2005-4367

Cross-site scripting XSS vulnerability in registerdomain.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the "Domain Availability" field. NOTE: this issue was later reported to affect CONTROLzx renamed from DRZES 3.3....

CVE-2005-4363

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4363

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4328

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2005-4336

Cross-site scripting XSS vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 fwd parameter in admin/adminsignin.html and 2 originalpageid parameter in admin/newpage.html associated with a group...

CVE-2005-4333

Multiple cross-site scripting XSS vulnerabilities in Binary Board System BBS 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 inreplyto, 2 article, and 3 board parameters to reply.pl, 4 branch, 5 board, and 6 stats.pl parameters to b stats.pl, and 7 board...

CVE-2005-4305

Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...

CVE-2005-4305

Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...

CVE-2005-4306

Multiple cross-site scripting XSS vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pg, 2 tid, 3 cid, and 4 fid parameters to netboardr.cgi, or 5 cid parameter to search.cgi...

CVE-2005-4305

Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...

CVE-2005-4301

Cross-site scripting XSS vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field...

CVE-2005-4285

Cross-site scripting XSS vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 the search module parameter or the 2 product and 3 cartid parameters...

CVE-2005-4295

Cross-site scripting XSS vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...