2 matches found
CVE-2006-1430
Multiple cross-site scripting XSS vulnerabilities in CONTROLzx HMS formerly DRZES 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dedicatedPlanID parameter to dedicatedorder.php, 2 sharedPlanID parameter to sharedorder.php, 3 planid parameter to...
CVE-2006-1430
Multiple cross-site scripting XSS vulnerabilities in CONTROLzx HMS formerly DRZES 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dedicatedPlanID parameter to dedicatedorder.php, 2 sharedPlanID parameter to sharedorder.php, 3 planid parameter to...