PT-2011-4736 · Cover · Cover

Name of the Vulnerable Software and Affected Versions: Cover WP theme versions prior to 1.6.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...

PT-2011-4726 · WordPress · Atahualpa

Name of the Vulnerable Software and Affected Versions: Atahualpa theme versions prior to 3.6.8 Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the s parameter. Recommendations: For versions prior to 3.6.8, update to version...

PT-2011-4733 · Unknown · Antisnews Theme

Name of the Vulnerable Software and Affected Versions: Antisnews theme versions prior to 1.10 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...

PT-2011-4730 · WordPress · Zenlite

Name of the Vulnerable Software and Affected Versions: ZenLite theme versions prior to 4.4 for WordPress Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable...

PT-2011-4739 · WordPress · Readline

Name of the Vulnerable Software and Affected Versions: RedLine theme versions prior to 1.66 for WordPress Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter. Recommendations: For versions prior to 1.66...

PT-2011-4728 · Unknown · Evolve Theme

Name of the Vulnerable Software and Affected Versions: EvoLve theme versions prior to 1.2.6 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable endpoint...

PT-2011-4731 · Unknown · F8 Lite Theme

Name of the Vulnerable Software and Affected Versions: F8 Lite theme versions prior to 4.2.2 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later...

PT-2011-4734 · Pixiv · Pixiv Custom Theme

Name of the Vulnerable Software and Affected Versions: Pixiv Custom theme versions prior to 2.1.6 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter. Recommendations: For versions prior to...

CVE-2010-2040

Cross-site scripting XSS vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter...

DEBIAN-CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2008-5323

Cross-site scripting XSS vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file...

Sql injection

SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2007-4165

Cross-site scripting XSS vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; th...

PT-2007-5361 · Xuyiyang · Blue Memories Theme

Cross-site scripting XSS vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; th...

PT-2006-6609 · Mginternet · Mginternet Car Site Manager

Name of the Vulnerable Software and Affected Versions: MGinternet Car Site Manager CSM affected versions not specified Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the s parameter in the /csm/asp/listings.asp API...

CVE-2006-4016

Cross-site scripting XSS vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter...