CVE-2012-1224

CVE-2012-1224 affects ContentLion Alpha 1.3; vulnerability is an XSS in the login script (system/classes/login.php) exploitable via PATH_INFO. This allows remote attackers to inject arbitrary web script or HTML. Exploit details, affected versions beyond 1.3, and remediation are not provided in th...

CVE-2012-1219

CVE-2012-1219 affects freelancerKit 2.35 with multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via 1) ticket parameter to tickets.php, 2) title parameter to notes.php, or 3) task parameter to todo.php. Root cause is input handling in these par...

CVE-2012-0995

CVE-2012-0995 affects Zenphoto 1.4.2 with multiple XSS vulnerabilities. The issue arises in ZENphoto where user-supplied input can be reflected in the browser via: (a) msg parameter to zp-core/admin.php, (b) PATH_INTO/PATH_INFO handling for unspecified URLs, (c) album parameter to zp-core/admin-e...

CVE-2012-1213

The CVE-2012-1213 issue affects Zimbra Collaboration Suite (ZCS) Web Client, specifically the zimbra/h/calendar component, with XSS in versions 6.x prior to 6.0.15 and 7.x prior to 7.1.3. The root cause is improper input handling of the view parameter in the calendar view, allowing remote attacke...

CVE-2011-3361

Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...

Cross site scripting

Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...

CVE-2011-4923

CVE-2011-4923 is an XSS vulnerability in BackupPC’s View.pm affecting versions 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer. The vulnera...

CVE-2011-5081

Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...

CVE-2012-0144

Cross-site scripting XSS vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."...

CVE-2012-1068

Cross-site scripting XSS vulnerability in the rcajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

CVE-2012-1060

Multiple cross-site scripting XSS vulnerabilities in revisioningtheme.inc in the Taxonomy module in the Revisioning module 6.x-3.13 and other versions before 6.x-3.14 for Drupal allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the 1 tags or 2 ter...

CVE-2012-1080: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Euro Calculator skteurocalc extension 0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3049

Name of the Vulnerable Software and Affected Versions Revisioning module versions 6.x-3.13 and earlier Description The issue allows remote authenticated users with certain privileges to inject arbitrary web script or HTML. This can be achieved via the tags or term parameters. Recommendations For...

PT-2012-3072

Name of the Vulnerable Software and Affected Versions BE User Switch extension version 0.0.1 for TYPO3 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors,...

PT-2012-1864

Name of the Vulnerable Software and Affected Versions Symphony CMS versions prior to 2.2.4 Description The issue allows remote authenticated users with Author privileges to inject arbitrary web script or HTML. This can be achieved via the profile parameter to...

Cross site scripting

Cross-site scripting XSS vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0696...

CVE-2012-1034

Multiple cross-site scripting XSS vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...