CVE-2005-4196

Multiple cross-site scripting XSS vulnerabilities in Scout Portal Toolkit SPT 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the ss parameter in SPT--QuickSearch.php; 2 ParentId parameter in SPT--BrowseResources.php; 3 the ResourceId parameter in...

CVE-2005-4177

The CVE-2005-4177 entry concerns an XSS vulnerability in Magic Book Personal and Professional 2.0, specifically in the book.cfm component where the StartRow parameter is not properly sanitized. The vulnerability could allow remote attackers to inject arbitrary web script or HTML, as documented by...

CVE-2005-4136

Cross-site scripting XSS vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter...

CVE-2005-4138

Multiple cross-site scripting XSS vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the 1 Wohnort and 2 Beruf fields in editprofile.php, 3 user parameter array in vprofile.php, and 4 the action parameter in misc.php...

CVE-2005-4061

Cross-site scripting XSS vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML via the search parameters...

CVE-2005-4057

CVE-2005-4057 describes a Cross-site scripting (XSS) vulnerability in the PluggedOut Nexus 0.1 project, specifically in search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the (1) Location, (2) Last Name, and (3) First Name parameters. The entries ...

CVE-2005-4061: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML via the search parameters...

CVE-2005-4044

CVE-2005-4044 describes a cross-site scripting (XSS) vulnerability in the search.cgi component of Amazon Search Directory 1.0.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially through the search parameter, leading to injec...

CVE-2005-4042

Cross-site scripting XSS vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi...

CVE-2005-4012

Multiple cross-site scripting XSS vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via 1 the lastnumber parameter to stat.php and 2 the HTTP referer to pixel.php...

CVE-2005-4024

Cross-site scripting XSS vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-3998

Cross-site scripting XSS vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-3972

Cross-site scripting XSS vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2005-3894

Multiple cross-site scripting XSS vulnerabilities in index.pl in Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 hex-encoded values in the QueueID parameter and 2 Action parameters...

CVE-2005-3867

CVE-2005-3867 is an XSS vulnerability in RevenuePilot Search Engine Script 1.2.0 and earlier. The issue arises in the REQ parameter used when performing a search, allowing remote attackers to inject arbitrary web script or HTML. The NVD metrics indicate network access with medium complexity, no a...

CVE-2004-2604

CVE-2004-2604 affects PHProxy’s index.php: XSS vulnerability exploitable via the error parameter that allows remote injection of arbitrary web script/HTML. The issue is documented across multiple sources (NVD, CVE lists, OSVDB/SecurityFocus references) with a base score of 4.3 (Medium) per NVD CV...

CVE-2004-2604

Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2005-3851

Cross-site scripting XSS vulnerability in search.asp in Online Attendance System OASYS Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possibly the keyword parameter...

CVE-2005-3854

Cross-site scripting XSS vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2005-3837

Cross-site scripting XSS vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter...