CVE-2008-5770: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in config/makeconfig.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5668: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Textpattern aka Txp CMS 4.0.5 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to setup/index.php or 2 the name parameter to index.php in the comments preview section...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5566

Cross-site scripting XSS vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5566: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5569: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php or 2 shop/kontakt.php, or 3 shopkundenmgmt.php or 4 SHOPKONFIGURATION.php in shop/Admin/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATHIN...

CVE-2008-5330: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATHIN...

CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite Authentication Bypass

CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite Authentication Bypass Author: girex Homepage: girex.altervista.org CMS: cpCommerce 1.2.6 Site: http://cpcommerce.cpradio.org/ Bug: URL Rewrite - Input variables overwrite PoC: Auth bypass - Shell upload Note: Works regardless php.ini setting...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 SearchResults/ and 2 Services/ in dsdn/dsweb/, and 3 the default URI under unspecified...

CVE-2008-5225: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 SearchResults/ and 2 Services/ in dsdn/dsweb/, and 3 the default URI under unspecified...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...

CVE-2008-5164

Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...

CVE-2008-5164: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO or the 2 option, 3 Itemid, 4 id, 5 task, 6 bid, and 7 contactid parameters. NOTE: the error might be located in...

CVE-2008-4648: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO or the 2 option, 3 Itemid, 4 id, 5 task, 6 bid, and 7 contactid parameters. NOTE: the error might be located in...

Cross site scripting

Cross-site scripting XSS vulnerability in Accellion File Transfer FTA70135 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to courier/forgotpassword.html...

CVE-2008-3850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Accellion File Transfer FTA70135 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to courier/forgotpassword.html...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

Sql injection

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to visit.php, or the PATHINFO to the default URI under 2 report/, 3 addreview/, or 4 refer/...