CVE-2006-6366

Cerberus Helpdesk is affected by a Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php. The js parameter can be exploited to inject arbitrary script/HTML in versions 0.97.3, 2.0–2.7, 3.2.1, and 3.3. This is a remote issue described in the CVE entry; exploitation ...

CVE-2006-6356

Multiple cross-site scripting XSS vulnerabilities in templates/linktemp.php in PHPNews 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 url, 2 id, 3 subject, 4 username, or 5 time parameter...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-6249: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6211

Multiple cross-site scripting XSS vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to a admin/admincore.php, the 2 month parameter to b admin/comments.php or c admin/entries.php, or the 3 page parameter to d admin/logs.php,...

CVE-2006-6188

Cross-site scripting XSS vulnerability in viewsearch.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6174

Cross-site scripting XSS vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in 1 tdiary.rb and 2 skel/conf.rhtml...

CVE-2006-6176: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin.php in Blogn before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2006-6162

Cross-site scripting XSS vulnerability in tiki-editstructures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the pageAlias parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6148

Multiple cross-site scripting XSS vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the 1 lName, 2 lURL, 3 lImage, and 4 lDescription parameters. NOTE: some of these details are obtained from third party information...

CVE-2006-6156: Undefined Security Weakness

Cross-site scripting XSS vulnerability in auth/message.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string PHPSELF. NOTE: The provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6124: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SeleniumServer Web Server 1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6087

Cross-site scripting XSS vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2006-6091

Cross-site scripting XSS vulnerability in Grim Pirate GrimBB before 20061121 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6088

Multiple cross-site scripting XSS vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 n or 2 d parameter in igallery.asp, or 3 an unspecified parameter related to search, possibly the Search Gallery field, or the myquery parameter, i...

CVE-2006-6032

Multiple cross-site scripting XSS vulnerabilities in Simple PHP Blog SPHPBlog, probably 0.4.8, allow remote attackers to inject arbitrary web script or HTML via 1 the action parameter in addblock.php or 2 the entry parameter in index.php, different vectors than CVE-2005-1135. NOTE: this has been...

CVE-2006-5985

Multiple cross-site scripting XSS vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 bg1, 2 bg2, 3 text, or 4 size parameters. NOTE: the provenance of this information is unknown; details are...

CVE-2006-5944

Cross-site scripting XSS vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager CSM allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-5942

Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...