Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 application/views/admin/layout.php and 2 themes/default/views/header.php in the Ushahidi Platform before 2.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to a site name...

CVE-2012-4246

Multiple cross-site scripting XSS vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter; or the 2 footer, 3 status, or 4 testtarget parameter in the send page...

PT-2012-5274

Name of the Vulnerable Software and Affected Versions phplist versions prior to 2.10.19 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters. The parameters page, footer, status, or testtarget in the send page can be exploited. Recommendatio...

CVE-2012-3465

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/sanitizehelper.rb in the striptags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup...

Cross site scripting

Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...

CVE-2012-2365

Cross-site scripting XSS vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...

RESTEasy: XML eXternal Entity (XXE) flaw

RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity XXE injection attack...

Cross site scripting

Cross-site scripting XSS vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers to inject arbitrary web script or HTML via multiple URLs in an img tag...

CVE-2012-0220

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

PT-2012-4042

Name of the Vulnerable Software and Affected Versions Pligg CMS versions prior to 1.2.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved through various parameters in different modules, including an arbitrary parameter in a move or minimiz...

PT-2012-4349

Name of the Vulnerable Software and Affected Versions PHP Address Book versions 7.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PATH INFO to "group.php", or the target language or target flag parameter to...

Cross site scripting

Cross-site scripting XSS vulnerability in myadmin/admin1listpages.php in SocialCMS 1.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the TRtitle parameter in an edit action...

PT-2012-3036

Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.4.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including the login data parameter to "admin/auth.php", the nb parameter to...

PT-2012-2923

Name of the Vulnerable Software and Affected Versions OxWall versions 1.1.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters to different API endpoints, including /Oxwall/join, /Oxwall/contact, /Oxwall/blogs/browse-by-tag,...

Cross site scripting

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formoptionshelper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain...

Cross site scripting

Cross-site scripting XSS vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0586, CVE-2012-0588, and CVE-2012-0589...

CVE-2012-0588

Cross-site scripting XSS vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0586, CVE-2012-0587, and CVE-2012-0589...

plone: A reflected cross site scripting vulnerability

Cross-site scripting XSS vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

DEBIAN-CVE-2011-3361

Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...