1393 matches found
CVE-2014-4160
Multiple cross-site scripting XSS vulnerabilities in the testcanvas node in SAP NetWeaver Business Client NWBC allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 sap-accessibility parameter...
CVE-2014-4160: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the testcanvas node in SAP NetWeaver Business Client NWBC allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 sap-accessibility parameter...
PT-2014-5687
Name of the Vulnerable Software and Affected Versions Best Soft Inc. BSI Advance Hotel Booking System version 2.0 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the title parameter in the booking...
CVE-2014-4035: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2013-2618
Cross-site scripting XSS vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web script or HTML via the maptitle parameter...
CVE-2013-2618
Cross-site scripting XSS vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web script or HTML via the maptitle parameter. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2014-2091
Cross-site scripting XSS vulnerability in mods/standard/forums/admin/forumadd.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an addforum action. NOTE: the original disclosure also reported issues that may not cross...
CVE-2014-2090
Multiple cross-site scripting XSS vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 tar, 2 tarval, or 3 title parameter...
CVE-2014-2091
Cross-site scripting XSS vulnerability in mods/standard/forums/admin/forumadd.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an addforum action. NOTE: the original disclosure also reported issues that may not cross...
CVE-2014-2090
Multiple cross-site scripting XSS vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 tar, 2 tarval, or 3 title parameter...
CVE-2014-2091
Cross-site scripting XSS vulnerability in mods/standard/forums/admin/forumadd.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an addforum action. NOTE: the original disclosure also reported issues that may not cross...
CVE-2014-2091: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in mods/standard/forums/admin/forumadd.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an addforum action. NOTE: the original disclosure also reported issues that may not cross...
PT-2014-4479
Name of the Vulnerable Software and Affected Versions ATutor version 2.1.1 Description A cross-site scripting XSS issue allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an 'add forum' action. This occurs in the mods/...
CVE-2013-4600
Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...
PT-2013-5088
Name of the Vulnerable Software and Affected Versions Alkacon OpenCms versions prior to 8.5.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the title parameter to "system/workplace/views/admin/admin-main.jsp" or the requestedResourc...
CVE-2013-4600: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...
MTP Image Gallery 1.0 Cross Site Scripting
MTP Image Gallery 1.0 title Remote Script Insertion Vulnerability alert1;' / input typ...
CVE-2012-4485
Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...
PT-2012-5431
Name of the Vulnerable Software and Affected Versions Gallery formatter module versions prior to 7.x-1.2 Description The issue allows remote authenticated users with permissions to create a node or entity to inject arbitrary web script or HTML via the title or alt parameter in the galleryformatte...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...