1142 matches found
CVE-2012-0989
Cross-site scripting XSS vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 motclef parameter to achat/recherche.php or 2 PATHINFO to index.php...
CVE-2012-0989: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...
CVE-2012-5226: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 motclef parameter to achat/recherche.php or 2 PATHINFO to index.php...
Directory traversal
Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a 1 ..%5c dot dot encoded backslash or 2 %2e%2e%5c encoded dot dot backslash in the PATHINFO...
CVE-2012-5100
Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a 1 ..%5c dot dot encoded backslash or 2 %2e%2e%5c encoded dot dot backslash in the PATHINFO...
CVE-2012-5100: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a 1 ..%5c dot dot encoded backslash or 2 %2e%2e%5c encoded dot dot backslash in the PATHINFO...
CVE-2011-5190
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
CVE-2011-5190
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
CVE-2012-0988: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 login.php, 2 admin.php, or 3 preferences.php...
CVE-2011-5190: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
CVE-2012-4336
Multiple cross-site scripting XSS vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 an arbitrary parameter...
CVE-2012-4923
Multiple cross-site scripting XSS vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the 1 createrule parameter to dnat.cgi, 2 addrule parameter to dansguardian.cgi, or 3 PATHINFO to openvpnusers.cgi...
Cross site scripting
Cross-site scripting XSS vulnerability in swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, and possibly before 4.50.1581, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 an arbitrary parameter...
CVE-2012-4336
Multiple cross-site scripting XSS vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 an arbitrary parameter...
CVE-2012-4336: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 an arbitrary parameter...
CVE-2012-3233: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, and possibly before 4.50.1581, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user, 2 email, 3 email2, 4 f17zip, or 5 agree parameter to join.php; 6 PATHINFO, 7 st, 8 f17city, 9 f17country, 10 f17state, 11 f17zip, 12 f19, 13...
CVE-2012-4870
Multiple cross-site scripting XSS vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 context parameter to panel/indexamp.php or 2 panel/dhtml/index.php; 3 clid or 4 clidname parameters to panel/flash/mypage.php; 5 PATHINFO to...