CVE-2008-5324

Multiple cross-site scripting XSS vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 before 2008B allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2379

CVE-2008-2379 is a cross-site scripting (XSS) vulnerability in SquirrelMail prior to 1.4.17, triggered by a crafted hyperlink in an HTML email part. The underlying issue is insufficient sanitization of HTML mail, allowing remote attackers to inject script/HTML in a user session. Related advisorie...

CVE-2008-5271

CVE-2008-5271 describes a Cross-site scripting (XSS) vulnerability in the SyndeoCMS 2.6.0 package (index.php) where the section parameter can be exploited to inject arbitrary web script/HTML. The cited sources confirm the vulnerability exists in SyndeoCMS 2.6.0 and indicate remote exploitation po...

CVE-2008-5224

Cross-site scripting XSS vulnerability in Kent Web Mart 1.61 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5193

Cross-site scripting XSS vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024...

CVE-2008-5202

CVE-2008-5202 describes an XSS vulnerability in OTManager CMS 24a, where the parameter conteudo in index.php is not properly sanitized. This allows remote attackers to inject arbitrary web script or HTML, potentially compromising the victim’s browser session. Affected product: OTManager CMS 24a (...

CVE-2008-5205

Cross-site scripting XSS vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action...

CVE-2008-5164

Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...

CVE-2008-5164

Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...

CVE-2008-5126

The CVE-2008-5126 entry concerns BoutikOne CMS, where the vulnerability is in the file search.php and is triggered via the search_query parameter. The issue is a Cross-site Scripting (XSS) vulnerability that permits remote attackers to inject arbitrary web script or HTML. The publicly provided de...

CVE-2008-5126

Cross-site scripting XSS vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

CVE-2008-5119

Cross-site scripting XSS vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2008-5095: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-5067

Cross-site scripting XSS vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in php/caldefault.php in Mini Web Calendar mwcal 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-5056

CVE-2008-5056 affects ActiveCampaign TrioLive before 1.58.7. The issue is a cross-site scripting (XSS) vulnerability in department_offline_context.php, exploitable via the department_id parameter to index.php. This allows remote attackers to inject arbitrary web script or HTML. The NVD entry list...

CVE-2008-5061

CVE-2008-5061 is a Cross-site Scripting (XSS) vulnerability in Mini Web Calendar (mwcal) 1.2, specifically in php/cal_default.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, impacting only the client-side confidentiality/integrity depending on the context...

CVE-2008-5043

Multiple cross-site scripting XSS vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via 1 the elementid parameter in a generatedreportresults action to the ReportTree program, 2 the jnlpnam...

Cross site scripting

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

CVE-2008-4928

Cross-site scripting XSS vulnerability in the redirect function in functions.php in MyBB aka MyBulletinBoard 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php, related to use of the ajax option to request a...