1097 matches found
CVE-2009-4552: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 home.html or 2 lands.html...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, the 2 archiv parameter, and the 3 subcat parameter...
CVE-2009-4469: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, the 2 archiv parameter, and the 3 subcat parameter...
CVE-2009-4478: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 home.html or 2 lands.html...
CVE-2009-4461: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 contact.php, 2 login.php, and 3 search.php...
CVE-2009-4446
Cross-site scripting XSS vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Cross site scripting
Cross-site scripting XSS vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2009-4446
CVE-2009-4446 describes an XSS in phpInstantGallery 1.1 (admin.php) exploitable via PATH_INFO. Exploitation by remote attackers is possible without authentication; impacts include partial integrity breach and no confidentiality/availability effects per CVSS? (Base 4.3, MEDIUM). Connected document...
CVE-2009-4446
Cross-site scripting XSS vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2009-4446: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2009-4403
Cross-site scripting XSS vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. NOTE: some of these details are obtained from third party information...
CVE-2009-4403
Cross-site scripting XSS vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. NOTE: some of these details are obtained from third party information...
CVE-2009-4403: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. NOTE: some of these details are obtained from third party information...
CVE-2009-3701: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1...
CVE-2009-4229: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter in the PATHINFO to the default URI or 2 the catid parameter to default.asp. NOTE: this might overlap CVE-2009-0429.3. NOTE: the provenance of...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2009-4087
Cross-site scripting XSS vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2009-4087: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...