CVE-2006-2066: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities pmpopup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 u1, 2 m1, 3 m2, 4 m3, 5 m4 parameters...

CVE-2005-4672: Undefined Security Weakness

Cross-site scripting XSS vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the 1 m1, 2 m2, 3 m3, 4 imgsrc, and 5 m4 parameter...