PYSEC-2014-79

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

FlexCMS 3.2.1 - Persistent Cross-Site Scripting

Persistent XSS in FLEXCMS 3.2.1 Software vendor: http://www.flexcms.com/flex/index.html The Persistent XSS appears when any user go to edit profile Display name and then injects the xss code instead of his display name. After inkection this code. In the main page of the webiste, there is "Users...

aflog-xss.txt

//Author Dentrasi //Application Aflog //Version 1.01 //Site http://www.aflog.org //Bug Users' display names are not sanitized, allowing XSS attacks to be performed. //PoC When signing up, use the display name: alert'xss' This affects your name when viewing any page that you have posted a comment...

Cross site scripting

Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...

CVE-2006-2307

Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...

CVE-2006-2307

Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...

CVE-1999-0251

Denial of service in talk program allows remote attackers to disrupt a user's display...

CVE-1999-0251

The CVE-1999-0251 entry concerns a denial of service in the talk program that allows remote attackers to disrupt a user’s display. The connected Red Hat, EUVD, CVE, and NVD records reiterate the same description; no concrete attack vectors, affected versions, or remediation are specified in the p...