CVE-2012-2687

Multiple cross-site scripting XSS vulnerabilities in the makevariantlist function in modnegotiation.c in the modnegotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted...

PT-2012-5487

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.5.x through 3.5.2.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via various means, including a Table Operations link for a crafted table name, the Add Trigger popup, an...

CVE-2012-2169

Cross-site scripting XSS vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field...

Cross site scripting

Cross-site scripting XSS vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2012-2769

Multiple cross-site scripting XSS vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2012-4037

Multiple cross-site scripting XSS vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 created by, or 3 name field in a torrent file...

CVE-2012-4340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-5342

Name of the Vulnerable Software and Affected Versions Gallery 3 versions prior to 3.0.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For Gallery 3 versions prior to...

PT-2012-5340

Name of the Vulnerable Software and Affected Versions Sybase EAServer versions prior to 6.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations For versions prior to 6.1, update ...

Cross site scripting

Cross-site scripting XSS vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contact Save module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the access site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...

CVE-2012-2151

Multiple cross-site scripting XSS vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3882

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.3.4 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the section parameter in the configuration module, the installstatus parameter in the languages new...

CVE-2012-2331

CVE-2012-2331 is a documented XSS vulnerability in Serendipity prior to 1.6.1. The issue occurs in the backend component located at serendipity/serendipity_admin_image_selector.php, where an attacker can inject script/HTML via the serendipity[textarea] parameter (potential CSRF relation noted). A...

CVE-2012-4278

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...

CVE-2012-4266

CVE-2012-4266 is an XSS vulnerability in Proman Xpress 5.0.1, exploitable via the cl_comments parameter in client_details.php. The issue allows remote attackers to inject arbitrary script/HTML. Affected component is the web page logic handling cl_comments, with no documented broader impact beyond...