CVE-2006-2282: Undefined Security Weakness

Cross-site scripting XSS vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to the avatar parameter in register.php...

security flaw

The WYSIWYG rendering engine "rich mail" editor in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which i...

CVE-2006-1344

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

CVE-2006-1344

CVE-2006-1344 describes a cross-site scripting (XSS) flaw in VeriSign’s haydn.exe CGI used by MPKI 6.0. The vulnerability stems from lack of input validation in the VHTML_FILE parameter, allowing an attacker to inject arbitrary HTML/JavaScript that is returned to the user’s browser. CORE Security...

CVE-2006-1344: Undefined Security Weakness

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag...

CVE-2006-1264

Cross-site scripting XSS vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag...

CVE-2006-1264

CVE-2006-1264 affects xhawk.net discussion 2.0 beta2. The issue is a Cross-site scripting (XSS) vulnerability where a Javascript URI in a BBCode img tag can be exploited to inject arbitrary script/HTML. The core problem is user-supplied content within a BBCode image tag not properly sanitized, en...

CVE-2006-1264: Undefined Security Weakness

Cross-site scripting XSS vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag...

CVE-2006-1223

Cross-site scripting XSS vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag...

Cross site scripting

Cross-site scripting XSS vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag...

CVE-2006-1223

Cross-site scripting XSS vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag...

CVE-2006-1223

CVE-2006-1223 affects Jupiter Content Manager 1.1.5 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that lets remote attackers inject arbitrary script or HTML via a Javascript URI in the image BBcode tag. Impact is client-side script execution; no further exploit details or pa...

CVE-2006-1223: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag...

Cross site scripting

Cross-site scripting XSS vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag...

CVE-2006-1130

Cross-site scripting XSS vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag...

CVE-2006-1130

CVE-2006-1130 affects EKINboard 1.0.3. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through a Javascript URI embedded in a BBCode img tag. The root cause is an insufficient sanitization/validation of the BBCode image ta...

CVE-2006-1130

Cross-site scripting XSS vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag...

CVE-2006-1130: Undefined Security Weakness

Cross-site scripting XSS vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag...