FreePBX 2.5.2 - Zap Channel Addition Description Parameter Cross-Site Scripting

source: https://www.securityfocus.com/bid/37482/info FreePBX is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

CVE-2007-5949

Cross-site scripting XSS vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action...

CVE-2006-4587

Multiple cross-site scripting XSS vulnerabilities in vtiger CRM 4.2.4, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 description parameter in unspecified modules or the 2 solution parameter in the HelpDesk module...

PT-2006-4289 · Taskjitsu · Taskjitsu

Name of the Vulnerable Software and Affected Versions: Taskjitsu versions prior to 2.0.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the title and description parameters when creating a task. Recommendations:...

CVE-2006-1622

CVE-2006-1622 describes a cross-site scripting (XSS) vulnerability in PHPSelect linksubmit. The issue arises from unsanitized input, allowing remote attackers to inject arbitrary script/HTML via the description parameter to linklist.php and potentially via index.php and linksubmit.php. Affected c...

CVE-2006-1622

Cross-site scripting XSS vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via 1 the description parameter to linklist.php and possibly other vectors involving 2 index.php and 3 linksubmit.php...