7605 matches found
CVE-2012-2308: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
PT-2012-4682
Name of the Vulnerable Software and Affected Versions Moodle versions 2.2.x through 2.2.3 Moodle versions 2.3.x through 2.3.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the lti typename or lti toolurl parameters in the mod/lti/typessettings.php file...
CVE-2012-2365
Cross-site scripting XSS vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php...
CVE-2012-2365
Cross-site scripting XSS vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php...
CVE-2012-2361
Cross-site scripting XSS vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the name field aka the service name to...
CVE-2012-2021
Multiple cross-site scripting XSS vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-4290
Multiple cross-site scripting XSS vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding...
CVE-2011-4282
Multiple cross-site scripting XSS vulnerabilities in the course-tags functionality in tag/coursetagsmore.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 sort or 2 show parameter...
CVE-2012-2021: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-0283
Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...
CVE-2012-3382
Cross-site scripting XSS vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properl...
CVE-2012-3805
CVE-2012-3805 describes multiple XSS vulnerabilities in Kajona up to version 3.4.2, exploitable via numerous GET/POST parameters across modules (content, postacomment, index, admin login, user, pages, filemanager, downloads, etc.). The root cause is inadequate sanitisation in getAllPassedParams, ...
CVE-2011-4299
Cross-site scripting XSS vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment...
CVE-2012-2641
Zenphoto contains a cross-site scripting (XSS) vulnerability in versions 1.4.2.4 and earlier (Zenphoto before 1.4.3). The issue allows an attacker to trigger improper interaction with an unspecified library to execute arbitrary script in a victim’s browser. This is a client-side impact with poten...
PT-2012-2478
Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved through unspecified vectors. Recommendations For Symantec Message...
PT-2012-4153
Name of the Vulnerable Software and Affected Versions Zenphoto versions prior to 1.4.3 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This is due to improper interaction with an unspecified librar...
CVE-2012-3837
Multiple cross-site scripting XSS vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 emailaddress, 3 password, 4 passwordverify, 5 firstname, 6 lastname, or 7 verificationcode...
CVE-2012-3835
Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...