6892 matches found
CVE-2003-1271
Cross-site scripting vulnerability XSS in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing the script...
CVE-2003-1182
Cross-site scripting XSS vulnerability in MPM Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter...
CVE-2002-1567
Cross-site scripting XSS vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script...
CVE-2003-0801
Cross-site scripting XSS vulnerability in Nokia Electronic Documentation NED 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script...
CVE-2003-0801
CVE-2003-0801 – Nokia Electronic Documentation (NED) 5.0 suffers a cross-site scripting (XSS) vulnerability. A remote attacker can cause the application to execute arbitrary web script and steal cookies via a crafted URL to the docs/ directory containing the script. Public references indicate an ...
CVE-2003-0526
Cross-site scripting XSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages 1 500.htm for "500...
CVE-2003-0523
Cross-site scripting XSS vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter...
CVE-2003-0495
Cross-site scripting XSS vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item...
CVE-2003-0479
Cross-site scripting XSS vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the 1 Name, 2 Email, or 3 Message fields...
CVE-2003-0488
Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via 1 the addname parameter in the addacl module, or 2 the alias parameter in the domap module...
CVE-2003-0295
Cross-site scripting XSS vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability...
CVE-2003-0278
Cross-site scripting XSS vulnerability in normalhtml.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter...
CVE-2003-0310
Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...
CVE-2003-0287
Cross-site scripting XSS vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled...
CVE-2003-0115
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could allow remote attackers to execute arbitrary web script, aka the "Third Party Plugin Rendering" vulnerability, a different vulnerability than CVE-2003-0233...
CVE-2003-0154
CVE-2003-0154 affects the Bonsai Mozilla CVS query tool (CGI suite) used to browse CVS repositories. The vulnerability is a cross-site scripting (XSS) flaw that can be triggered via multiple parameters: cvslog.cgi (file, root, rev), cvsblame.cgi (file, root), cvsquery.cgi (various), showcheckins....
CVE-2003-0044
Multiple cross-site scripting XSS vulnerabilities in the 1 examples and 2 ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML...
CVE-2002-2055
Cross-site scripting XSS vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2002-1795
Cross-site scripting XSS vulnerability in connect.asp in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors...