Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Textpattern aka Txp CMS 4.0.5 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to setup/index.php or 2 the name parameter to index.php in the comments preview section...

CVE-2008-5668

Multiple cross-site scripting XSS vulnerabilities in Textpattern aka Txp CMS 4.0.5 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to setup/index.php or 2 the name parameter to index.php in the comments preview section...

CVE-2008-5669: Improper Input Validation

index.php in the comments preview section in Textpattern aka Txp CMS 4.0.5 allows remote attackers to cause a denial of service via a long message parameter...