PT-2011-1703

Name of the Vulnerable Software and Affected Versions LightNEasy version 3.2.1 Description A cross-site scripting XSS issue exists due to improper handling of the id parameter in a forced SQL error message, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For...

CVE-2010-2854: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in modfile.php in Event Horizon EVH 1.1.10, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 YourEmail and 2 VerificationNumber parameters, which are not properly handled in a forced SQL erro...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 searchtext and 2 searchcategory parameters. NOTE: the XSS reportedly occurs in a forced SQL error message. NOTE: some of these details are obtain...