CVE-2011-4454: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting vulnerabilities in Tiki 8.0 RC1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to 1 tiki-remindpassword.php, 2 tiki-index.php, 3 tiki-loginscr.php, or 4 tiki-index...

Unfixed XSS vulnerability at www.ivec.org

Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.ivec.org, which at the time of submission ranked 3826800 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It is currently...