7975 matches found
CVE-2006-2431
Cross-site scripting XSS vulnerability in the 500 Internal Server Error page on the SOAP port 8880/tcp in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 CFTOKEN parameter in a index.cfm and 3 CFTOKEN and 4 CFID parameter in b chat.cfm...
CVE-2006-2417
CVE-2006-2417 describes an XSS vulnerability in phpMyAdmin 2.8.0.x prior to 2.8.0.4, where an attacker can inject arbitrary script/HTML via the theme parameter in certain scripts (lang parameter covered by CVE-2006-2031). The vulnerability is remote and could lead to script execution in the victi...
CVE-2006-2418
Cross-site scripting XSS vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts...
Cross site scripting
Cross-site scripting XSS vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 rep parameter to a index.php or b diapo.php or 2 image parameter to c affich.php. NOTE: item 1a might be resultant from directory traversal...
CVE-2006-2390
The set of connected documents confirms a cross-site scripting (XSS) vulnerability in OZJournals 1.2, exploitable via the vname parameter in the comments functionality. The CVSSv2 base score is 5.8 (Medium), with network access required and no user interaction needed, and impact described as part...
CVE-2006-2419: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter...
CVE-2006-2359
Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
Cross site scripting
Cross-site scripting XSS vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a "required" field when the associated normal field is missing or empty, which is not sanitized before being presented in an...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the 1 sDeviceView or 2 nDeviceID parameter to a NmConsole/Navigation.asp or 3 sHostname parameter to b...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...
CVE-2006-2351
Multiple cross-site scripting XSS vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the 1 sDeviceView or 2 nDeviceID parameter to a NmConsole/Navigation.asp or 3 sHostname parameter to b...
CVE-2006-2358
Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Cross-site scripting XSS vulnerability in inc/elementz.php in AliPAGER 1.5 allows remote attackers to inject arbitrary web script or HTML via the ubild parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. NOTE: this issue might be...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2006-2321
Multiple cross-site scripting XSS vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207...