Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...

Cross site scripting

Cross-site scripting XSS vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the pagex parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that includes a windows.setTimeout function that is activated after the user has moved from the current page...

CVE-2007-2391

Cross-site scripting XSS vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that includes a windows.setTimeout function that is activated after the user has moved from the current page...

WordPress Vistered Little Theme - XSS

Because of this vulnerability in 404.php, the attackers can inject arbitrary web script or HTML via the URI REQUESTURI that accesses index.php. Solution Update the theme...

CVE-2007-3195

Cross-site scripting XSS vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document...

CVE-2007-3202

Cross-site scripting XSS vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document...

CVE-2006-3974

Cross-site scripting XSS vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter...

CVE-2007-3134

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

CVE-2007-3131

Cross-site scripting XSS vulnerability in addcomment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in public/code/cpdpage.php in All In One Control Panel AIOCP before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocpdp parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter Authors and Publication titles to 1 authoractions.php or 2 publicationactions.php...

CVE-2007-3056

Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3056

Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP Live! 3.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to a chat.php, 2 LANGDEFAULTBRANDING and 3 PHPLIVEVERSION parameters to b help.php, the 4 adminname parameter to c admin/header.php, and the 5...

CVE-2007-3056

Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP JackKnife PHPJK allow remote attackers to inject arbitrary web script or HTML via 1 the sUName parameter to UserArea/Authenticate.php, 2 the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the 3 iCategoryUnq, 4 iDBLoc, 5...