9792 matches found
CVE-2008-6161
Cross-site scripting XSS vulnerability in WOW Raid Manager WRM before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-0359
Multiple cross-site scripting XSS vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the 1 message title or 2 user full name...
Debian DSA-1724-1 : moodle - several vulnerabilities
Several vulnerabilities have been discovered in Moodle, an online course management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0500 It was discovered that the information stored in the log tables was not properly sanitized, which could...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter aka the Help field. NOTE: some of these details are...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 action and 2 page parameters...
CVE-2009-0573
Multiple cross-site scripting XSS vulnerabilities in FotoWeb 6.0 Build 273 allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to cmdrequest/Login.fwx and the 2 search parameter to Grid.fwx...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in FotoWeb 6.0 Build 273 allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to cmdrequest/Login.fwx and the 2 search parameter to Grid.fwx...
CVE-2009-0548
Cross-site scripting XSS vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...
CVE-2009-0532
Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...
CVE-2009-0529
Cross-site scripting XSS vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter...
CVE-2009-0526
Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...
CVE-2008-6113
Cross-site scripting XSS vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the 1 username and 2 profile page...
Cross site scripting
Cross-site scripting XSS vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php...
CVE-2008-6105
Cross-site scripting XSS vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party informatio...
CVE-2008-6108
Cross-site scripting XSS vulnerability in result.php in Galatolo WebManager GWM 1.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a denylog manage action...
Cross site scripting
Cross-site scripting XSS vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via the ni.smessage parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...