44 matches found
CVE-2006-2252
Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2006-2252
CVE-2006-2252 describes a cross-site scripting vulnerability in OpenFAQ 0.4.0’s submit.php, exploitable via the q parameter to inject arbitrary script/HTML. The issue arises from insufficient input validation in the submit handler, enabling an attacker to deliver script to a victim’s browser. Aff...
CVE-2005-2074
CVE-2005-2074 affects PHP-Fusion 6.0.105: a cross-site scripting (XSS) vulnerability in submit.php that can inject arbitrary HTML/Script via the news_body, article_description, or article_body parameters. Exploitation details are documented in connected sources; there is no explicit patched versi...
PHP-Fusion < 6.00.106 submit.php Multiple Parameter HTML Injection
Binary data 3037.prm...