6 matches found
Portábilis i-Educar 代码注入漏洞
Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portabilis i-Educar version 2.9.0, which stems from cross-site scripting due to improper handling of the parameter novotitulo in the file...
CVE-2007-3291
Cross-site scripting XSS vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in article.php...
CVE-2007-3291
CVE-2007-3291 describes a cross-site scripting (XSS) flaw in LiveCMS 3.4 and earlier. The vulnerability arises from handling the article name (potentially involving the titulo parameter in article.php), allowing remote attackers to inject arbitrary script/HTML. Evidence from NVD lists a MEDIUM im...
CVE-2007-3291
Cross-site scripting XSS vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in article.php...
Cross site scripting
Cross-site scripting XSS vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field...
CVE-2006-0124
Cross-site scripting XSS vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field...