CVE-2005-4386

Cross-site scripting XSS vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4377

Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...

CVE-2005-4379

Multiple cross-site scripting XSS vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the 1 sortmode parameter to a fisheye/listgalleries.php, b messages/messagebox.php, and c users/my.php; the 2 postid parameter to d blogs/viewpost.ph...

CVE-2005-4367

Cross-site scripting XSS vulnerability in registerdomain.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the "Domain Availability" field. NOTE: this issue was later reported to affect CONTROLzx renamed from DRZES 3.3....

CVE-2005-4363

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4363

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4328

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2005-4336

Cross-site scripting XSS vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 fwd parameter in admin/adminsignin.html and 2 originalpageid parameter in admin/newpage.html associated with a group...

CVE-2005-4333

Multiple cross-site scripting XSS vulnerabilities in Binary Board System BBS 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 inreplyto, 2 article, and 3 board parameters to reply.pl, 4 branch, 5 board, and 6 stats.pl parameters to b stats.pl, and 7 board...

CVE-2005-4305

Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...

CVE-2005-4305

Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...

CVE-2005-4306

Multiple cross-site scripting XSS vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pg, 2 tid, 3 cid, and 4 fid parameters to netboardr.cgi, or 5 cid parameter to search.cgi...

CVE-2005-4305

Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...

CVE-2005-4327: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the 1 function, 2 year, and 3 date parameters to webcal.cgi, 4 new calendar entries, and 5 notes for entries...

CVE-2005-4311: Undefined Security Weakness

Cross-site scripting XSS vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via 1 the page parameter in dcboard.php and 2 unspecified search parameters...

CVE-2005-4301

Cross-site scripting XSS vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field...

CVE-2005-4285

Cross-site scripting XSS vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 the search module parameter or the 2 product and 3 cartid parameters...

CVE-2005-4295

Cross-site scripting XSS vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4255

Cross-site scripting XSS vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter...

CVE-2005-4248

CVE-2005-4248 : Multiple cross-site scripting (XSS) vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via fields in (1) communication/subscribers.tracking.add.php, (2) support/tickets.add.php, and (3) mycompany/categories.php. The description across ...