CVE-2012-2910: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

PT-2012-4356

Name of the Vulnerable Software and Affected Versions SiliSoftware phpThumb version 1.7.11 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the dir parameter to "demo/phpThumb.demo.random.php" or the title parameter to...

vBulletin 4.1.12 Cross Site Scripting

TITLE ....... vBulletin 4.1.12 Reflected XSS try csrf for registered users DATE ........ 24.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.vbulletin.com VERSION ..... 4.1.12 TESTED ON ... LAMP ----------------------------------------------------------------------- 1...

CVE-2012-1219

Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...

CVE-2012-0976

Cross-site scripting XSS vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-0976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information...

PT-2012-2982

Name of the Vulnerable Software and Affected Versions SilverStripe version 2.4.6 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter in the admin/EditForm section...

CVE-2010-4863

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

CVE-2010-4863

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

CVE-2010-4848

Multiple cross-site scripting XSS vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 url or 2 title parameter...

CVE-2010-4848: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 url or 2 title parameter...

PT-2011-4055

Name of the Vulnerable Software and Affected Versions Chyrp versions 2.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the action parameter to the default URI or includes/javascript.php, or the title or body parameter to...

CVE-2011-2743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to 1 the default URI or 2 includes/javascript.php, or the 3 title or 4 body parameter to admin/help.php...

Design/Logic Flaw

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message...

PT-2011-1729

Name of the Vulnerable Software and Affected Versions Enano CMS versions prior to 1.1.8 Enano CMS versions 1.0.6pl3 and earlier Enano CMS version 1.1.7pl1 Description The issue allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation pa...

CVE-2010-4781: Exposure of Sensitive Information to an Unauthorized Actor

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message...

PT-2011-1706

Cross-site scripting XSS vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnews title parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: thi...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

CVE-2010-4504: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

PT-2010-5508

Name of the Vulnerable Software and Affected Versions eSyndiCat Directory version 2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the title parameter to API endpoints such as "suggest-category.php" and "suggest-listing.php"...