CVE-2008-7171: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Lightweight news portal LNP 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 photo parameter to showphoto.php, 2 potd parameter to showpotd.php, or 3 the Current question field in a vote action to admin.php...

Unfixed XSS vulnerability at www.blueorchidsbarbados.com

Security researcher BackDoor, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting www.blueorchidsbarbados.com, which at the time of submission ranked 7147394 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008...