CVE-2007-2801: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 err and 2 warn parameters. NOTE: the vendor disputes the significance of the issue, stating that...

Format string

Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in 1 warn and 2 err calls, possibly involving a lib/s3.cpp, b tools/afconvert.cpp, c tools/afcopy.cpp, d tools/afinfo.cpp, e aimage/imager.cp...

CVE-2005-4432

Cross-site scripting XSS vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter...

CVE-2005-4432: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter...

CVE-2005-3795

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via 1 the Err parameter in admin/index.php and the 2 firstname and 3 lastname parameters in index.php...

CVE-2005-3320: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via the err parameter in the panel script...

CVE-2004-1844: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the err parameter to error.asp or 2 register.asp...