CVE-2015-6805: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the message field in a private message...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Subject or 2 Message field...

CVE-2014-100017

CVE-2014-100017 concerns an XSS vulnerability in canned_opr.php of PhpOnlineChat 3.0, allowing remote attackers to inject arbitrary web script or HTML via the message field. Multiple sources (NVD entry) confirm the flaw, with the basic metrics showing a Medium severity (CVSS v2: AV:N/AC:M/Au:N/C:...

CVE-2014-100017: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cannedopr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbitrary web script or HTML via the message field...

PT-2015-3623

Name of the Vulnerable Software and Affected Versions PhpOnlineChat version 3.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the message field in the canned opr.php file...

PT-2008-2399

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.5.8 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the message, pagename, and target filenames in the action/AttachFile.py file. This enables attackers to perform...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the 1 vedipm or 2 livechat module...

CVE-2007-6085

Multiple cross-site scripting XSS vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the 1 vedipm or 2 livechat module...

CVE-2007-6085

Multiple cross-site scripting XSS vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the 1 vedipm or 2 livechat module...

CVE-2003-1479

Cross-site scripting XSS vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field...

CVE-2003-1479: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field...

Cross site scripting

Cross-site scripting XSS vulnerability in Big Blue Guestbook allows remote attackers to inject arbitrary web script or HTML via the message field in the guestbook entry submission form...

CVE-2007-2203: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Big Blue Guestbook allows remote attackers to inject arbitrary web script or HTML via the message field in the guestbook entry submission form...

CVE-2007-1132

Multiple cross-site scripting XSS vulnerabilities in the "Contact Us" functionality in MTCMS 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 message and 2 title fields...

CVE-2007-1132: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the "Contact Us" functionality in MTCMS 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 message and 2 title fields...

CVE-2006-6874: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Message or 2 Your Name field. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...

CVE-2003-1296: Undefined Security Weakness

Easy File Sharing EFS Web Server 1.2 allows remote authenticated users to cause a denial of service via 1 an "empty symbol" in the Title field or 2 certain data in the Your Message field, possibly a long argument...

CVE-2006-0934: Undefined Security Weakness

Cross-site scripting XSS vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form...

CVE-2006-0605

Multiple cross-site scripting XSS vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the 1 Handle or 2 Message fields...