CVE-2006-3191

Cross-site scripting XSS vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...

CVE-2006-3088

Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

HotPlugCMS_1.0 - SQL Injection Vulnerability

HotPlugCMS doesn't check input field values, so logging in on /hotplugcms/administration/tblcontent is very easy with ' OR 1=1 / and a SQL-inject will bypass the entire authentication process. Typical, very simple SQL Injection. peda...

GLSA-200606-12 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200606-12 Mozilla Firefox: Multiple vulnerabilities A number of vulnerabilities were found and fixed in Mozilla Firefox. For details please consult the references below. Impact : By enticing the user to visit a malicious website, ...

CVE-2006-3039

Cross-site scripting XSS vulnerability in index.php in Cescripts Realty Home Rent allows remote attackers to inject arbitrary web script or HTML via the selmenu parameter. NOTE: the vendor notified CVE on 20060823 that "All issues concerning this script and others at cescripts.com have been...

CVE-2006-3020

Multiple cross-site scripting XSS vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 image and 2 PublisedDate parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in cat.php in PHP Pro Publish 2.0 allows remote attackers to inject arbitrary web script or HTML via the catname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in Lycos Tripod htmlGEAR guestGEAR aka Guest Gear allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra "iframe" tagname within that element,...

Cross site scripting

Cross-site scripting XSS vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an IMG element...

CVE-2006-2680

Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...

Advisory: UBBThreads 5.x,6.x Multiple File Inclusion Vulnerabilities.

--Security Report-- Advisory: UBBThreads 5.x,6.x Multiple File Inclusion Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 09:44 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Infopop...

CVE-2006-2581

Cross-site scripting XSS vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 addWeblog.php and 2 leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag...

CVE-2006-2500

Cross-site scripting XSS vulnerability in addnews.asp in CodeAvalanche News CANews 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field. NOTE: if this issue is limited to administrators, and if it is expected behavior for administrators to be able to generate...

Cross site scripting

Cross-site scripting XSS vulnerability in PassMasterFlex and PassMasterFlexPlus PassMasterFlex+ 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 username, 2 password, or 3 User-Agent HTTP header in the Hack Log...

Cross site scripting

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 comentarii.php or 2 view.php. NOTE: this issue might be resultant from SQL injection...

Cross site scripting

Cross-site scripting XSS vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML via the Comments field when signing the guestbook...