CVE-2006-1474

Cross-site scripting XSS vulnerability in the "failed" functionality in Raindance Web Conferencing Pro allows remote attackers to inject arbitrary web script or HTML via the browser parameter...

CVE-2006-1479

Multiple cross-site scripting XSS vulnerabilities in Serge Rey gtd-php aka Getting Things Done 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in 1 newProject.php, 2 newList.php, and 3 newWaitingOn.php; the Title field in 4 newProject.php, 5 newList.php...

CVE-2006-1479: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Serge Rey gtd-php aka Getting Things Done 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in 1 newProject.php, 2 newList.php, and 3 newWaitingOn.php; the Title field in 4 newProject.php, 5 newList.php...

CVE-2006-1487: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module...

CVE-2006-1430

Multiple cross-site scripting XSS vulnerabilities in CONTROLzx HMS formerly DRZES 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dedicatedPlanID parameter to dedicatedorder.php, 2 sharedPlanID parameter to sharedorder.php, 3 planid parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 adid or 2 aname parameter in a common/email.asp, b users/userssearch.asp, or c users/usersprofiles.asp; 3 page parameter in d...

CVE-2006-1398

Cross-site scripting XSS vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the gmessage parameter...

CVE-2006-1401

Multiple cross-site scripting XSS vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 allwords or 2 oneword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party informati...

CVE-2006-1404

Multiple cross-site scripting XSS vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 file or 2 function parameter...

CVE-2006-1407

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 file or 2 function parameter...

CVE-2005-4747

Cross-site scripting XSS vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors involving the default page...

CVE-2006-1411

Cross-site scripting XSS vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 the shownew parameter in gallery.asp and 2 unspecified search module parameters...

CVE-2006-1401

Multiple cross-site scripting XSS vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 allwords or 2 oneword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party informati...

CVE-2006-1396: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1392: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified inputs...

CVE-2006-1369

Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message PM in certain circumstances...

Cross site scripting

Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message PM in certain circumstances...

CVE-2006-1369

Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message PM in certain circumstances...

Cross site scripting

Cross-site scripting XSS vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to 1 list.rhtml or 2 show.rhtml...