CVE-2009-3488: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Bibliography aka Biblio module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479...

CVE-2009-3479: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Bibliography Biblio 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title...

Cross site scripting

Cross-site scripting XSS vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a 1 document subGeneralProps:dmpvDocTitle:PROPWtitle or 2 container...

CVE-2008-7231

Cross-site scripting XSS vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a 1 document subGeneralProps:dmpvDocTitle:PROPWtitle or 2 container...

CVE-2008-7231: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a 1 document subGeneralProps:dmpvDocTitle:PROPWtitle or 2 container...

CVE-2009-3157: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the title of a content type...

PT-2009-5473 · Drupal · Drupal Calendar Module

Name of the Vulnerable Software and Affected Versions: Drupal Calendar module version 6.x before 6.x-2.2 Description: A cross-site scripting XSS issue exists in the Calendar module for Drupal, allowing remote authenticated users with "create new content types" privileges to inject arbitrary web...

DEBIAN-CVE-2008-7185

GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service segmentation fault and crash via a playlist .pls file with a long Title field, possibly related to the ghashtablelookup function in b-playlist-manager.c...

CVE-2009-3060

Multiple cross-site scripting XSS vulnerabilities in Joker Board aka JBoard 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the notice parameter to editform.php, 2 the editusermessage parameter to core/editusermessage.php, or 3 the usertitle parameter to...

CVE-2008-7098

Multiple cross-site scripting XSS vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the 1 Title and 2 Text fields; 3 the gallery, possibly the Description field in Your Pictures; 4 the forum, possibly the Your Message fiel...

CVE-2008-7061: Undefined Security Weakness

The tooltip manager chrome/views/tooltipmanager.cc in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denial of service CPU consumption or crash via a tag with a long title attribute, which is not properly handled when displayin...

CVE-2009-2919

Cross-site scripting XSS vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field...

CVE-2009-2919

Cross-site scripting XSS vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field...

CVE-2009-2919: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field...

CVE-2008-6994

Removed by vendor...

CVE-2009-2610: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via the title field...

CVE-2009-2586: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...

CVE-2009-2145

Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...

CVE-2009-2145

Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...