Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter in addlinklwp.cgi and the 2 id, 3 forgotid, and 4 forgotpass parameters in edit.cgi...

CVE-2006-1943: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter in addlinklwp.cgi and the 2 id, 3 forgotid, and 4 forgotpass parameters in edit.cgi...

CVE-2002-1427

The CVE-2002-1427 entry affects Easy Homepage Creator 1.0. The print_html_to_file function in edit.cgi does not validate user credentials, enabling remote attackers to modify other users’ home pages. CVSS v2 data reports a base score of 7.5 ( HIGH ) with network attack vector, no authentication, ...

CVE-2002-1427: Undefined Security Weakness

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...