CVE-2006-2365: Undefined Security Weakness

Cross-site scripting XSS vulnerability in alogin.php in Vizra allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2006-2146

Multiple cross-site scripting XSS vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 postername, 2 posteremail, 3 posterhomepage, or 4 message parameter...

CVE-2006-1977

Cross-site scripting XSS vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 name and 2 message parameters...

CVE-2006-1757: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary web script or HTML via the message parameter, probably involving the basket functionality...

CVE-2006-1687: Undefined Security Weakness

Cross-site scripting XSS vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary web script or HTML via the message parameter, probably involving the basket functionality...

CVE-2006-1660

Cross-site scripting XSS vulnerability in imagedesc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1435: Undefined Security Weakness

Cross-site scripting XSS vulnerability in genmessage.php in Accounting Receiving and Inventory Administration ARIA 0.99-6 allows remote attackers to inject arbitrary web script or HTML via the Message Field message parameter...

PT-2006-2108 · Game Panel · Game-Panel

Name of the Vulnerable Software and Affected Versions: Game-Panel versions 2.6.1 and earlier Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in the login.php file. This may require a URL encoded value...

CVE-2006-1106: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 message, 2 name, 3 url, and 4 email parameters when commenting on a post. NOTE: the vendor has disputed some issues from the original disclosure, but...

CVE-2006-1080: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter, possibly requiring a URL encoded value...

CVE-2005-4671: Undefined Security Weakness

Cross-site scripting XSS vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2005-4551: Undefined Security Weakness

Cross-site scripting XSS vulnerability in sign.php in codegrrl SimpBook 1.0, when htmlenable is on, allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php...

CVE-2004-2484: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to 1 event.php or 2 index.php...

CVE-2005-2610

Cross-site scripting XSS vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2005-2610: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2005-2427: Undefined Security Weakness

Cross-site scripting XSS vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2005-2386: Undefined Security Weakness

Cross-site scripting XSS vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2002-2021

Cross-site scripting XSS vulnerability in WoltLab Burning Board wbboard 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2002-2021: Undefined Security Weakness

Cross-site scripting XSS vulnerability in WoltLab Burning Board wbboard 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter...