Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 tipo or 2 destino parameter to loginregistrese.php3 in the Services section, 3 the rubro parameter to precios.php3 in the Products section, 4...

Unfixed XSS vulnerability at www.sparkfun.com

Security researcher SaMTHG, has submitted on 23/10/2008 a cross-site-scripting XSS vulnerability affecting www.sparkfun.com, which at the time of submission ranked 30494 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is currentl...