CVE-2006-2167

Cross-site scripting XSS vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element...

CVE-2006-2159

CVE-2006-2159 describes a CRLF injection vulnerability in help.php of Russcom Network Loginphp. The issue allows remote attackers to spoof e-mails and inject MIME headers by crafting CRLF sequences in the email address. According to the NVD entry, the vulnerability is exploitable over the network...

Cross site scripting

Cross-site scripting XSS vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2006-1967

Cross-site scripting XSS vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...

CVE-2006-1891

Cross-site scripting XSS vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormValprofile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability...

CVE-2006-1893

Cross-site scripting XSS vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-1741

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by 1 "using a modal alert to suspend an event handler while a new page is being loaded", 2 using eval, and using...

cross-site scripting through window.controllers — Mozilla

shutdown demonstrated how to use the window.controllers array to bypass same-origin protections, allowing a malicious site to inject script into content from another site. This could allow the malicious page to steal information such as cookies or passwords from the other site, or perform...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 tname or 2 fpost parameters to a post.php; 3 fullname, 4 emailadd, 5 country, 6 sig, or 7 otherav parameters to b editac.php; or 8 fullname, 9 emailadd, or 10...

Cross site scripting

Cross-site scripting XSS vulnerability in the "failed" functionality in Raindance Web Conferencing Pro allows remote attackers to inject arbitrary web script or HTML via the browser parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script or HTML via URL-encoded 1 srchfor and 2 srchby parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in a phpAdsNew and b phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or 2 certain...

Cross site scripting

Cross-site scripting XSS vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to 1 list.rhtml or 2 show.rhtml...

Cross site scripting

Cross-site scripting XSS vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag...

CVE-2006-1196

Multiple cross-site scripting XSS vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 from and 2 help parameters to a index.php; 3 action, 4 page, 5 debug, 6 help, 7 username, or 8 password parameters to b login.php; the 7 help parameter to c...

CVE-2006-1155

Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...

Cross site scripting

Cross-site scripting XSS vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via 1 the user parameter in deleteuser.php and 2 the hits parameter in viewuser.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to search.php or 2 username parameter to commentsdo.php...

CVE-2006-1127

Cross-site scripting XSS vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For XFORWARDEDFOR HTTP header, which is not properly handled when adding a comment to an album...