CVE-2006-0438

Cross-site request forgery CSRF vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode IMG are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to 1 admin/adminusers.php and 2...

Microsoft Internet Explorer 7 beta version buffer overflow

urlmon.dll bgsound tag oversized SRC filename paramter buffer overflow...

CVE-2006-0521

CVE-2006-0521 is a Cross-site scripting (XSS) vulnerability in BrowserCRM’s results.php where a manipulated query parameter can inject arbitrary script/HTML (demonstrated with an IMG SRC tag). Affects BrowserCRM; CVSS v2 base score 4.3 (MEDIUM). No explicit exploit details or remediation are prov...

Cross site scripting

Cross-site scripting XSS vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG tag...

CVE-2006-0469

CVE-2006-0469 is an XSS vulnerability affecting UebiMiau 2.7.9 (and possibly earlier versions). The issue arises from accepting a javascript: URI in the SRC attribute of an IMG tag, enabling remote attackers to inject arbitrary web script or HTML. The available connected documents provide the NVD...

Phpclanwebsite.txt

NightWarrior nightwarrior771athotmail.com Phpclanwebsite BBCode IMG Tag XSS Vulnerability Contact :nightwarrior771athotmail.com hompage : www.phpclanwebsite.com Vulnerable: imgjavascript:alert'XSS'/img Contact :nightwarrior771athotmail.com NightWarrior...

Cross site scripting

Cross-site scripting XSS vulnerability in Phpclanwebsite aka PCW allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a BBCode img tag...

CVE-2006-0361

Cross-site scripting XSS vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an tag in the comment parameter, which strips most tags but not...

Cross site scripting

Cross-site scripting XSS vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an tag in the comment parameter, which strips most tags but not...

CVE-2006-0366

Affects Phpclanwebsite (aka PCW). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web scripts or HTML via a javascript URI in a BBCode img tag. Based on the connected records, the issue arises from untrusted input being processed in BBCode r...

CVE-2006-0366

Cross-site scripting XSS vulnerability in Phpclanwebsite aka PCW allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a BBCode img tag...

CVE-2006-0310

Cross-site scripting XSS vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag...

Cross site scripting

Cross-site scripting XSS vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag...

CVE-2006-0310

Cross-site scripting XSS vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag...

CVE-2006-0310

The CVE-2006-0310 vulnerability affects aoblogger 2.3. It is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag. The root cause is improper handling of the BBcode url tag in aoblogger 2.3, enabling script execut...

CVE-2006-0233

CVE-2006-0233 refers to a cross-site scripting (XSS) vulnerability in the PHP file functions.php of the microBlog 2.0 RC-10 package. The issue allows remote attackers to execute arbitrary web script and HTML by supplying a javascript: URI in a [url] BBCode tag, potentially compromising user sessi...

CVE-2006-0233

Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...

Cross site scripting

Multiple cross-site scripting vulnerabilities in the 1 Pool or 2 News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

CVE-2005-4644

Cross-site scripting XSS vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

CVE-2005-4644

Cross-site scripting XSS vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...