Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2009-4422

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2009-4422

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2009-4422: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2006-7000: Undefined Security Weakness

Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to 1 email/mail.php, 2 includes/init.php, 3 certain files in includes/cron/, and 4 jpgraph.php, 5 jpgraphbar.php, 6 jpgraphpie.php, and 7 jpgraphpie3d.php in includes/graph/, which leaks the path in...