9792 matches found
CVE-2008-3572
Cross-site scripting XSS vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter...
CVE-2008-3565
Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...
CVE-2008-3574
Multiple cross-site scripting XSS vulnerabilities in Pluck 4.5.2, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 langfooter parameter to a data/inc/footer.php; the 2 pluckversion, 3 langinstall22, 4 titelkop, 5 langkop1, 6 langkop2, 7...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via the 1 filename parameter to search.asp and the 2 page parameter to order.asp. NOTE: the provenance of this information is unknown; the details are obtained solely...
Cross site scripting
Cross-site scripting XSS vulnerability in proxyftp.c in the modproxyftp module in Apache 2.0.63 and earlier, and modproxyftp.c in the modproxyftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory...
CVE-2008-2939
Cross-site scripting XSS vulnerability in proxyftp.c in the modproxyftp module in Apache 2.0.63 and earlier, and modproxyftp.c in the modproxyftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory...
CVE-2008-3483
Cross-site scripting XSS vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary web script or HTML via error messages in the "/admin.aspx - System Log" page...
CVE-2008-3422
Multiple cross-site scripting XSS vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to 1 HtmlControl.cs PreProcessRelativeReference, 2 HtmlForm.cs RenderAttributes, 3 HtmlInputButton...
CVE-2008-3398
Multiple cross-site scripting XSS vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129...
CVE-2008-3397
Cross-site scripting XSS vulnerability in Runesoft Cerberus CMS before 31.40.9 allows remote attackers to inject arbitrary web script or HTML via a cerberususer cookie...
Cross site scripting
Cross-site scripting XSS vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the pic parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in RTEpopuplink.asp in Web Wiz Rich Text Editor RTE 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2008-3367
Cross-site scripting XSS vulnerability in RTEpopuplink.asp in Web Wiz Rich Text Editor RTE 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02
Saved - 27-07-2008/13:10:02 .: Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02 .: Author CSDT .: Affected versions http://www.webwizguide.com/ - Web Wiz Rich Text Editor RTE 4.02 .: Credit The disclosure of these issues has been credited to autehoker of CSDT...
Cross site scripting
Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edpNews action...
CVE-2008-3340
Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...
CVE-2008-3344
Multiple cross-site scripting XSS vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a allow remote attackers to inject arbitrary web script or HTML via the 1 ResultHtml, 2 dir, 3 SenderName, 4 RecipientName, 5 SenderMail, and 6 RecipientMail...