PT-2013-4851

Name of the Vulnerable Software and Affected Versions DS3 Authentication Server affected versions not specified Description The issue allows remote attackers to inject arbitrary error-page text via the message parameter in the ServerAdmin/ErrorViewer.jsp page. Recommendations At the moment, there...

CVE-2013-4098: Improper Input Validation

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter...

PT-2013-1978

Name of the Vulnerable Software and Affected Versions Joomla! component nBill com nbill version 2.3.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the message parameter in an income action to "administrator/index.php"...

CVE-2012-6514: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the nBill comnbill component 2.3.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the message parameter in an income action to administrator/index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to 1 messagesviewer.php, 2 home.php, or 3 history.php...

PT-2012-5914

Name of the Vulnerable Software and Affected Versions php ireport version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the message parameter to specific API endpoints, including "messages viewer.php", "home.php", or "history.php". This can lead to...

CVE-2012-5315: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to 1 messagesviewer.php, 2 home.php, or 3 history.php...

CVE-2012-5103: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url or 2 message parameter...

CVE-2012-1000: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 message parameter to admins/login/forgot/index.php, or the 2 displayname or 3 email parameter to account/preferences.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the 1 visitorlanguage parameter to register.php or 2 message parameter...

CVE-2012-1027: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in account-closed.tcl in project-open aka po 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed...

CVE-2012-0932: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

PT-2012-2959

Name of the Vulnerable Software and Affected Versions Lead Capture Page System affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the message parameter ...

PT-2011-4995

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 1.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in a gv send action to "index.php". Recommendations For versions pri...

CVE-2011-4567: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/templates/templatedefault/templates/tplgvsenddefault.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gvsend action to index.php, a different vulnerability than CVE-2011-4547...

PT-2011-1989

Name of the Vulnerable Software and Affected Versions JAMWiki versions prior to 0.8.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the message parameter in the Special:Login feature. Recommendations For...

CVE-2010-5054: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2009-4939

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

CVE-2010-2355

The CVE-2010-2355 entry describes a Cross-site scripting (XSS) vulnerability in error.php of Pilot Group (PG) eLMS Pro. The flaw allows remote attackers to inject arbitrary web script or HTML via the message parameter, potentially affecting any user who views the compromised page. The NVD details...

CVE-2010-2355: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in error.php in Pilot Group PG eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...