Mandriva Linux Security Advisory : mailman (MDVSA-2008:061)

Multiple cross-site scripting XSS vulnerabilities were found in Mailman prior to version 2.1.10b1, which allow remote attackers to inject arbitrary web script or HTML via edting templates and the list's info attribute in the web administrator interface. The updated packages have been patched to...

CVE-2009-1366

Cross-site scripting XSS vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke DNN before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "name/value pairs" and "paypal IPN functionality."...

Cross site scripting

Cross-site scripting XSS vulnerability in the "Customize Statistics Page" admin/statistics/ConfigureStatistics in the MDS Connection Service in Research in Motion RIM BlackBerry Enterprise Server BES before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the 1...

Cross site scripting

Cross-site scripting XSS vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."...

CVE-2008-6732

Cross-site scripting XSS vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."...

Cross site scripting

Cross-site scripting XSS vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the translation functionality...

Cross site scripting

Cross-site scripting XSS vulnerability in Ultimate PHP Board UPB 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

Cross site scripting

Cross-site scripting XSS vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection CDP for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 gridPage and 2 gridSort parameters. NOTE: some of these details are obtained from third party information...

CVE-2009-1320

Multiple cross-site scripting XSS vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 gridPage and 2 gridSort parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-6715

Multiple cross-site scripting XSS vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 homeadmin/adminhome.php and 2 homeadmin/signinform.php...

Cross site scripting

Cross-site scripting XSS vulnerability in JobControl dmmjobcontrol 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-6683

Cross-site scripting XSS vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject arbitrary web script or HTML via the r parameter...

CVE-2008-6700

Multiple cross-site scripting XSS vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 mytable parameter to view.php, 2 mytable parameter to viewdb2.php, 3 tablehere parameter to category-rename.php, and 4 letter parameter to...

CVE-2008-6688

Cross-site scripting XSS vulnerability in JobControl dmmjobcontrol 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to 1 servlet/com.threeis.webta.H710selProject and 2 servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial repo...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the close parameter to showThumb.aspx; 2 SBredirect and 3 SBfeedback parameters in processsend.asp, as reachable through default.asp; 4 paramCode and 5 cColor...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...