CVE-2024-39094

Friendica 2024.03 is vulnerable to Cross Site Scripting XSS in settings/profile via the homepage, xmpp, and matrix parameters...

EUVD-2007-1619

Malware in sbrugna...

PT-2024-28348 · Friendica · Friendica

Name of the Vulnerable Software and Affected Versions: Friendica version 2024.03 Description: The issue is related to Cross Site Scripting XSS in the settings/profile section via the homepage, xmpp, and matrix parameters. This allows for potential malicious script execution. Recommendations: For...

CVE-2007-1625: Undefined Security Weakness

Cross-site scripting XSS vulnerability in saveentry.php in realGuestbook 5.01 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter, as reachable through addentry.php. NOTE: the original report stated that the vulnerability was in addentry.php, which does not...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 homepage, 3 email, and 4 address parameters...

CVE-2006-2572

Cross-site scripting XSS vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 homepage, 3 email, and 4 address parameters...

CVE-2006-1979

Cross-site scripting XSS vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter...

CVE-2006-1979: Undefined Security Weakness

Cross-site scripting XSS vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter...

Cross site scripting

Cross-site scripting vulnerability in eintrag.php in Gästebuch Gastebuch before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the URL, which is used in the homepage parameter...

CVE-2006-0706

CVE-2006-0706 affects the Gästebuch (Gastebuch) script prior to version 1.3.3. The vulnerability is a cross-site scripting (XSS) flaw in eintrag.php, where user-supplied data in the homepage parameter of the URL can inject arbitrary script/HTML. This is a remote-facing issue with the homepage par...

CVE-2006-0706: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in eintrag.php in Gästebuch Gastebuch before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the URL, which is used in the homepage parameter...

CVE-2006-0069: Undefined Security Weakness

Cross-site scripting XSS vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the homepage parameter...