9792 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 currentpath, 2 invert, 3 search, and 4 sort parameters...
CVE-2008-4174
Multiple cross-site scripting XSS vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 currentpath, 2 invert, 3 search, and 4 sort parameters...
CVE-2008-4179
Multiple cross-site scripting XSS vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to smileys.php and the 2 q parameter to search.php...
Cross site scripting
Cross-site scripting XSS vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted Flash animation, related to the ability of the animation to "interact with the embedding page."...
Cross site scripting
Cross-site scripting XSS vulnerability in High Norm Sound Master 2nd 1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in 1 Tor World Tor Board 1.3 and earlier, 2 Topics BBS 1.11 and earlier, 3 Simple BBS 1.86 and earlier, and 4 Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than...
CVE-2008-4079
Cross-site scripting XSS vulnerability in Movable Type MT 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable Type Community Solution allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4051
Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter in a search action to the default URI...
Cross site scripting
Cross-site scripting XSS vulnerability in DIC shopv50 3.0 and earlier and shopv52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3935
Cross-site scripting XSS vulnerability in DIC shopv50 3.0 and earlier and shopv52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
FreeBSD Ports: phpmyadmin, phpMyAdmin
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: phpldapadmin098
The remote host is missing an update to the system as announced in the referenced advisory. VID 6d78202e-e2f9-11da-8674-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-3101
Multiple cross-site scripting XSS vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the parenttab parameter in an index action to the Products module, as reachable through index.php; 2 the userpassword parameter in an Authenticate action to th...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zmhtmlview.php" files...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway DSGW web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AN Guestbook ANG before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3849
CVE-2008-3849 describes a Cross-site scripting (XSS) vulnerability in the calendar controller of Civic Website Manager prior to version 1.0.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving (1) month, (2) day, and (3) year fiel...