35 matches found
CVE-2009-1408
Cross-site scripting XSS vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using 1 email, 2 img, and 3 url...
CVE-2009-1408: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using 1 email, 2 img, and 3 url...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the 1 color, 2 size, or 3 url bbcode tags...
CVE-2006-2143
Multiple cross-site scripting XSS vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the 1 color, 2 size, or 3 url bbcode tags...
CVE-2006-2143
CVE-2006-2143 describes multiple XSS vulnerabilities in TextFileBB 1.0.16. The issue allows remote attackers to inject arbitrary JavaScript/HTML via onmouseover-based events in the (1) color, (2) size, or (3) url bbcode tags. Affected software: TextFileBB 1.0.16. Root cause: lack of proper input ...
CVE-2006-2143: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the 1 color, 2 size, or 3 url bbcode tags...
Cross site scripting
Cross-site scripting XSS vulnerability in guestbook.php in my little homepage my little guestbook, as last modified in March 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...
CVE-2006-0140: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in post.php in NavBoard V16 Stable2.6.0 and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the 1 b, 2 textlarge, and 3 url bbcode tags...
CVE-2005-4588
Cross-site scripting XSS vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4588
The CVE-2005-4588 entry describes a Cross-site scripting (XSS) vulnerability in Koobi 5. The issue arises when parsing nested, malformed URL BBCode tags, enabling remote attackers to inject arbitrary web script or HTML into the affected application. The sources indicate the vulnerability is in Ko...
CVE-2005-4588: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-2783
Cross-site scripting XSS vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags...
CVE-2005-2783: Undefined Security Weakness
Cross-site scripting XSS vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags...
CVE-2005-2327
Cross-site scripting XSS vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested url BBCode tags...
CVE-2005-2327: Undefined Security Weakness
Cross-site scripting XSS vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested url BBCode tags...