47 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS aka Flatnuke3 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter to the default URI; 2 the foto parameter to photo.php in the 05Foto module; or 3 the name parameter in an insertrecord...
CVE-2008-5761
Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS aka Flatnuke3 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter to the default URI; 2 the foto parameter to photo.php in the 05Foto module; or 3 the name parameter in an insertrecord...
CVE-2008-5761
CVE-2008-5761 affects FlatnuX CMS (aka Flatnuke3). The provided documents describe multiple cross-site scripting (XSS) vulnerabilities: (1) via the mod parameter in the default URI, (2) via the foto parameter to photo.php in the 05_Foto module, and (3) via the name parameter in an insertrecord ac...
CVE-2008-5759
Cross-site scripting XSS vulnerability in FlatnuX CMS aka Flatnuke3 2008-12-11 allows remote attackers to inject arbitrary web script or HTML via the name parameter in an updaterecord action to index.php in the 08Files module. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Cross-site scripting XSS vulnerability in FlatnuX CMS aka Flatnuke3 2008-12-11 allows remote attackers to inject arbitrary web script or HTML via the name parameter in an updaterecord action to index.php in the 08Files module. NOTE: the provenance of this information is unknown; the details are...
CVE-2008-5759
Cross-site scripting XSS vulnerability in FlatnuX CMS aka Flatnuke3 2008-12-11 allows remote attackers to inject arbitrary web script or HTML via the name parameter in an updaterecord action to index.php in the 08Files module. NOTE: the provenance of this information is unknown; the details are...
CVE-2008-5759
CVE-2008-5759 is a cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3). The affected component is the 08_Files module (index.php) and the issue arises from the name parameter in an updaterecord action, allowing remote attackers to inject arbitrary web script or HTML. The docum...