Cross-site scripting (XSS) vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the (1) easingslider_manage_customizations or (2) easingslider_edit_sliders page to wp-admin/admin.php.


Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via the msgParam parameter in an authError action aka \Exchange Error Message Cross Site Scripting Vulnerability.\


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Gecko

CMS

and

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

horder

sp

ssp

or

sssp

parameter

to

admin/index.php

or

the

editor

fldr

lang

popup

subfolder

or

type

parameter

to


Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21 and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.


Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request aka \Microsoft SharePoint XSS Vulnerability.\


Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3 2.2 and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or (b) forum_entry.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

web

administration

frontend

in

the

httpd

package

in

before

and

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

conntrack.cgi

index.cgi

problems.cgi

status.cgi

or

script

in

admin/.


Cross-site scripting (XSS) vulnerability in the Active Content Filtering component in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27 6.1.5 through 6.1.5.3 CF27 7.0.0 through 7.0.0.2 CF29 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.


Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the appid parameter in a registration task to the default URI or remote administrators to inject arbitrary web script or HTML via the (2) asc_or_desc (3) order_by (4) page_number (5) serch_or_not or (6) search_events_by_title parameter in (a) the Spider_Facebook_manage page to wp-admin/admin.php or a (b) selectpagesforfacebook or (c) selectpostsforfacebook action to wp-admin/admin-ajax.php.


Cross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x 8.7.x and 8.8.x before 8.8.000005 allows remote authenticated users to inject arbitrary web script or HTML via a password entry which is not properly handled when toggling the password mask.


Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload as used in WordPress 3.9.x 4.0.x and 4.1.x before 4.1.2 and other products allows remote attackers to execute same-origin JavaScript functions via the target parameter as demonstrated by executing a certain click function related to _init.as and _fireEvent.as.


The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the \eshopcart\ HTTP cookie which allows remote attackers to perform cross-site scripting (XSS) attacks or a path disclosure attack via crafted variables named after target PHP variables.


Cross-site scripting (XSS) vulnerability in the Dynamic VPN in Juniper Junos 12.1X44 before 12.1X44-D45 12.1X46 before 12.1X46-D30 12.1X47 before 12.1X47-D20 and 12.3X48 before 12.3X48-D10 on SRX series devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Cross-site scripting (XSS) vulnerability in the Taxonews module before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the \administer taxonomy\ permission to inject arbitrary web script or HTML via a term name in a block.


Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19 6.x before 6.0.7 and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted contact.


Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template which is not properly handled in the help_text attribute in the Field class.


Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search (search_nom) field to (1) htdocs/societe/societe.php or (2) htdocs/societe/admin/societe.php.


Multiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus (aka WPPA) plugin before 6.1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) comemail or (2) comname parameter in a wppa do-comment action.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

roomcloud.php

in

the

Roomcloud

plugin

before

for

WordPress

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

pin

lang

adults

or

children

parameter.


mod/quiz/db/access.php in Moodle through 2.5.9 2.6.x before 2.6.11 2.7.x before 2.7.8 and 2.8.x before 2.8.6 does not set the RISK_XSS bit for graders which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted gradebook feedback during manual quiz grading.


Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11 5.2.x before 5.2.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation attack.


Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.


Cross-site scripting (XSS) vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors involving a \double encode combination of first_name last_name and company.\


Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2 when MySQL is used without strict mode allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer as demonstrated by a crafted character in a comment.


Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9 2.6.x before 2.6.11 2.7.x before 2.7.8 and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.


Multiple cross-site scripting (XSS) vulnerabilities in the Room Reservations module before 7.x-1.1 for Drupal allow remote authenticated users with the \Administer the room reservations system\ permission to inject arbitrary web script or HTML via the (1) node title of a \Room Reservations Category\ or (2) body of a \Room Reservations Room\ node.


Cross-site scripting (XSS) vulnerability in the administration user interface in the Classified Ads module before 6.x-3.1 and 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the \administer taxonomy\ permission to inject arbitrary web script or HTML via a category name.


Cross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the \access wishlists\ permission to inject arbitrary web script or HTML via unspecified vectors which are not properly handled in a log message.


TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages which might allow remote attackers to obtain password hashes via a cross-site scripting attack.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

TheCartPress

eCommerce

Shopping

Cart

(aka

The

Professional

WordPress

eCommerce

Plugin)

plugin

for

WordPress

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

or

parameter

to

shopping-cart/checkout/;

the

parameter

in

the

admin/AddressesList.php

page

to

wp-admin/admin.php;

the

firstname

lastname

street

city

postcode

or

email

parameter

in

the

admin/AddressEdit.php

page

to

wp-admin/admin.php;

the

or

parameter

in

the

admin/AssignedCategoriesList.php

page

to

wp-admin/admin.php;

or

the

parameter

in

the

admin/CustomFieldsList.php

page

to

wp-admin/admin.php.


Cross-site scripting (XSS) vulnerability in the DisplayEntityField.getDescription method in ModelFormField.java in Apache OFBiz before 12.04.06 and 13.07.x before 13.07.03 allows remote attackers to inject arbitrary web script or HTML via the description attribute of a display-entity element.


Cross-site scripting (XSS) vulnerability in the user_get_user_details function in user/lib.php in Moodle through 2.6.11 2.7.x before 2.7.9 2.8.x before 2.8.7 and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an external_format_text call in a web service.


Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.


Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11 2.7.x before 2.7.9 2.8.x before 2.8.7 and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.


Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) searchkeywords parameter to index.php/users page; the (2) \Name of application\ on index.php/configuration; (3) a new project name on index.php/projects; (4) the task name on index.php/tasks; (5) ticket name on index.php/tickets; (6) discussion name on index.php/discussions; (7) report name on index.php/projectReports; or (8) event name on index.php/scheduler/personal.


The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings and did not escape some of them when outputting them allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads


Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message aka \Exchange Spoofing Vulnerability.\


The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message which allows remote attackers to conduct cross-site scripting (XSS) attacks via the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix.


Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477 3.6.x before 3.6.1217 3.7.x before 3.7.1248 3.8.x before 3.8.1263 and other versions allow remote attackers to inject arbitrary web script or HTML via (1) crafted input to index.php that is processed by certain Internet Explorer 7 configurations or (2) crafted input to the widget feature.


Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24 1.2x before 1.23.9 and 1.24.x before 1.24.2 when using HHVM allows remote attackers to inject arbitrary web script or HTML via an invalid parameter in a wddx format request to api.php which is not properly handled in an error message related to unsafe calls to wddx_serialize_value.


Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9 2.6.x before 2.6.9 2.7.x before 2.7.6 and 2.8.x before 2.8.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) alt or (2) title attribute in an IMG element.


Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the (1) schltr parameter in a brands action or (2) brand parameter in a viewbrands action to index.php. NOTE: The search parameter vector is already covered by CVE-2010-5322.


Multiple cross-site scripting (XSS) vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) ctrl (2) t90001_0_theform_selection (3) _scroll (4) tableName (5) parent (6) circuit (7) return (8) xname or (9) mpTransactionId parameter.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

WebGUI

in

pfSense

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

zone

parameter

to

if

or

dragtable

parameter

to

queue

parameter

in

an

add

action

to

id

parameter

in

an

edit

action

to

or

or

parameter

to


Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit_time parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php.


Multiple cross-site scripting (XSS) vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) next_page (2) group_id (3) action_script or (4) flag parameter to start_apply.htm.


Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted (1) email or (2) HTTP request which triggers a DLP Policy.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

parameter

to

index.php/dashboard/system/conversations/bannedwords/success

channel

parameter

to

index.php/dashboard/reports/logs/view

accessType

parameter

to

index.php/tools/required/permissions/access_entity

msCountry

parameter

to

index.php/dashboard/system/multilingual/setup/load_icon

arHandle

parameter

to

design/submit

or

design

in

index.php/ccm/system/dialogs/area/design/submit

pageURL

to

index.php/dashboard/pages/single

parameter

to

index.php/dashboard/system/seo/searchindex/updated

unit

parameter

to

index.php/dashboard/system/optimization/jobs/job_scheduled

parameter

to

index.php/dashboard/system/registration/open/1

or

to

index.php/dashboard/extend/connect/.


Cross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24 1.2x before 1.23.9 and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via a LanguageConverter substitution string when using a language variant.


Cross-site scripting (XSS) vulnerability in templates/2k11/admin/entries.tpl in Serendipity before 2.0.1 allows remote authenticated editors to inject arbitrary web script or HTML via the serendipitycatname parameter to serendipity_admin.php when creating a new category.


Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/magmi.php or (2) QUERY_STRING to web/magmi_import_run.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Apache

Sling

API

before

and

Apache

Sling

Servlets

Post

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

URI

related

to

org/apache/sling/api/servlets/HtmlResponse

and

org/apache/sling/servlets/post/HtmlResponse.


Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5 4.6 and 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) page (2) c or (3) redirect parameter to index.php or (4) search field (searchTerm parameter) in the main page.


Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonly_fields as demonstrated by a @property.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

views/add-license-form.php

in

the

Digium

Addons

module

(digiumaddoninstaller)

before

for

FreePBX

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

or

parameter

in

an

add-license-form

page

to

admin/config.php.


Cross-site scripting (XSS) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary web script or HTML via the command XML element in the req parameter to flexdata.action in (1) common/ (2) monitor/ or (3) psnpm/ or the (4) module XML element in the req parameter to flexdata.action in monitor/.


Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly Cyvera Endpoint Protection) 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the (1) Arguments (2) FileName or (3) URL parameter in a SOAP request.


Multiple cross-site scripting (XSS) vulnerabilities in ocPortal before 9.0.17 allow remote authenticated users to inject arbitrary web script or HTML via the (1) title or (2) text field in the cms_calendar page to cms/index.php; unspecified fields in (3) the cms_polls page to cms/index.php or (4) a new topic in the topics page to forum/index.php; or (5) a new PT (private topic/private message) in the topics page to forum/index.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Alkacon

OpenCms

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

homelink

parameter

to

workplaceresource

parameter

to

path

parameter

to

mode

parameter

to

or

query

parameter

in

a

search

action

to


Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100 InnGate 3.01 E InnGate 3.10 E InnGate 3.10 M SG 4 and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.


Open redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0 before 9.0.1 FP4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting (XSS) attacks via a crafted URL aka SPR SJAR9DNGDA.


The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation which allows remote attackers to upload HTML documents and conduct cross-site scripting (XSS) attacks via a spoofed value as demonstrated by image/jpeg.


Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) itemname or (2) itemcustomcss parameter in a wonderplugin_audio_save_item action to wp-admin/admin-ajax.php or the itemid parameter in the (3) wonderplugin_audio_show_item or (4) wonderplugin_audio_edit_item page to wp-admin/admin.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

SAP

HANA

and

HANA

Developer

Edition

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

unspecified

vectors

to

or

aka

SAP

Note


Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.


Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) MIME-type field in an add action in the config-attachment_types module to admin/index.php; (2) title or (3) short description field in an add action in the (a) config-mycode or (b) user-groups module to admin/index.php; (4) title field in an add action in the (c) forum-management or (d) tool-tasks module to admin/index.php; (5) name field in an add_set action in the style-templates module to admin/index.php; (6) title field in an add_template_group action in the style-templates module to admin/index.php; (7) name field in an add action in the config-post_icons module to admin/index.php; (8) \title to assign\ field in an add action in the user-titles module to admin/index.php; or (9) username field in the config-banning module to admin/index.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Websense

TRITON

AP-WEB

before

and

V-Series

appliances

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

ws-userip

in

the

ws-encdata

parameter

to

cve-bin/moreBlockInfo.cgi

in

the

Data

Security

block

page

or

parameter

to

in

the

Content

Gateway

which

is

not

properly

handled

in

an

error

message.


Multiple cross-site scripting (XSS) vulnerabilities in the WP Media Cleaner plugin 2.2.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) view (2) paged or (3) s parameter in the wp-media-cleaner page to wp-admin/upload.php.


Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24 1.2x before 1.23.9 and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via a custom JavaScript file which is not properly handled when previewing the file.


Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message aka \Exchange Spoofing Vulnerability.\


Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8 SP1 before Rollup 10 and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL aka \System Center Operations Manager Web Console XSS Vulnerability.\


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

Welcart

plugin

before

for

WordPress

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

parameter

to

classes/usceshop.class.php

includes/edit-form-advanced.php

or

related

to

admin.php.


Cross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php.


Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email.


Cross-site

scripting

(XSS)

vulnerability

in

in

Moodle

through

before

before

and

before

allows

remote

authenticated

users

to

inject

arbitrary

web

script

or

HTML

by

leveraging

the

student

role

for

a

crafted

quiz

response.


The utils.http.is_safe_url function in Django before 1.4.20 1.5.x 1.6.x before 1.6.11 1.7.x before 1.7.7 and 1.8.x before 1.8c1 does not properly validate URLs which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control character in a URL as demonstrated by a \\x08javascript: URL.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

Report

Viewer

in

Ericsson

Drutt

Mobile

Service

Delivery

Platform

(MSDP)

and

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

portal

fromDate

toDate

fromTime

toTime

kword

uname

pname

sname

atype

or

atitle

parameter

to

top-links.jsp;

portal

or

uid

parameter

to

(a)

page-summary.jsp

or

(b)

service-summary.jsp;

portal

fromDate

toDate

fromTime

toTime

sortDirection

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

(c)

top-useragent-devices.jsp

or

(d)

top-interest-areas.jsp;

fromDate

toDate

fromTime

toTime

sortDirection

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

top-message-services.jsp;

portal

fromDate

toDate

fromTime

toTime

orderBy

sortDirection

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

(e)

user-statistics.jsp

(f)

top-web-pages.jsp

(g)

top-devices.jsp

(h)

top-pages.jsp

(i)

session-summary.jsp

(j)

top-providers.jsp

(k)

top-modules.jsp

or

(l)

top-services.jsp;

fromDate

toDate

fromTime

toTime

orderBy

sortDirection

uid

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

message-shortcode-summary.jsp;

fromDate

toDate

fromTime

toTime

orderBy

sortDirection

uid

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

(m)

message-providers-summary.jsp

or

(n)

message-services-summary.jsp;

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

license-summary.jsp;

portal

fromDate

toDate

fromTime

toTime

orderBy

sortDirection

uid

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

useragent-device-summary.jsp;

fromDate

toDate

fromTime

toTime

orderBy

sortDirection

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

(o)

top-message-providers.jsp

(p)

top-message-devices.jsp

(q)

top-message-assets.jsp

(r)

top-message-downloads.jsp

or

(s)

top-message-shortcode.jsp;

fromDate

toDate

fromTime

toTime

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

request-summary.jsp;

portal

parameter

to

link-summary-select.jsp

provider-summary-select.jsp

or

module-summary-select.jsp;

portal

uid

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

link-summary.jsp;

portal

fromDate

toDate

fromTime

toTime

orderBy

sortDirection

uid

kword

uname

pname

sname

file

atype

or

atitle

parameter

to

(t)

provider-summary.jsp

or

(u)

module-summary.jsp

in

reports/pages/.


Multiple cross-site scripting (XSS) vulnerabilities in the Ninja Forms plugin before 2.8.9 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the ninja_forms_field_1 parameter in a ninja_forms_ajax_submit action to wp-admin/admin-ajax.php or (2) remote administrators to inject arbitrary web script or HTML via the fields1 parameter to wp-admin/post.php.


Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) homepage_url (2) pic_url or (3) avatar_url parameter which are not properly handled in an error message.


Multiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inject arbitrary HTML via the (1) name or (2) title field in card content associated with a search link that is mishandled after a HOME button press or a Show Windows action as demonstrated by embedding an arbitrary application or spoofing the account-creation page.


Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; the (2) use_js parameter to user.php; the (3) use_js parameter to group.php; the (4) Description parameter to status.php; the (5) Description parameter to severity.php; the (6) Regex parameter to os.php; or the (7) Name parameter to database.php.


The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.


The Content text slider on post WordPress plugin before 6.9 does not sanitise and escape the Title and Message/Content settings which could lead to Cross-Site Scripting issues


The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings allowing attacker to make logged in admin change them via a CSRF attack. Furthermore due to the lack of escaping when they are outputting it could also lead to Stored Cross-Site Scripting issues


Cross-site

scripting

(XSS)

vulnerability

in

the

function

in

in

Horde

Groupware

before

and

Horde

Groupware

Webmail

Edition

before

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

vectors

involving

numeric

form

fields.


The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

Admin

UI

in

Apache

Solr

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

crafted

fields

that

are

mishandled

during

the

rendering

of

the

Analysis

page

related

to

or

Schema-Browser

page

related

to


Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab parameter in a wp_cta_global_settings action to wp-admin/edit.php or (2) wp-cta-variation-id parameter to ab-testing-call-to-action-example/.


The sapi_header_op function in main/SAPI.c in PHP before 5.4.38 5.5.x before 5.5.22 and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.


Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Alcatel-Lucent Motive Home Device Manager (HDM) before 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceTypeID parameter to DeviceType/getDeviceType.do; the (2) policyActionClass or (3) policyActionName parameter to PolicyAction/findPolicyActions.do; the deviceID parameter to (4) SingleDeviceMgmt/getDevice.do or (5) device/editDevice.do; the operation parameter to (6) ajax.do or (7) xmlHttp.do; or the (8) policyAction (9) policyClass or (10) policyName parameter to policy/findPolicies.do.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

content/content.systempreferences.php

in

Symphony

CMS

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

jit_image_manipulationtrusted_external_sites

or

parameters

to

system/preferences.


Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation.


Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during \Add to home screen\ bookmarking.


Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter in a mail task to the default URL a different vulnerability than CVE-2011-2937.


Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x 3.x and 4.x before 4.2.16 4.3.x and 4.4.x before 4.4.11 and 4.5.x and 5.0.x before 5.0.2 when a local dot configuration is used allows remote attackers to inject arbitrary web script or HTML via a crafted bug summary.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

SilverStripe

CMS

Framework

before

and

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

Locale

or

FailedLoginCount

parameter

to

admin/security/EditForm/field/Members/item/new/ItemEditForm.


Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227 5.5.1 before 5.5.1-1616 5.5.2 before 5.5.2-434 and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.


Cross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the \Administer themes\ permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings.


Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.


Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12 1.24.x before 1.24.5 1.25.x before 1.25.4 and 1.26.x before 1.26.1 when is configured with a relative URL allows remote authenticated users to inject arbitrary web script or HTML via wikitext as demonstrated by a wikilink to a page named \javascript:alert('XSS!').\


Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly have other unspecified impact as demonstrated by uploading a file with an .html extension then accessing it via the elFinder functionality.


Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters related to /users/index.htm /quarantine/spam/manage.htm /quarantine/spam/whitelist.htm /queues/mail/index/ /system/ssh.htm /queues/mail/?domain= and /quarantine/virus/manage.htm.


An

issue

was

discovered

in

Skybox

Platform

before

Reflected

cross-site

scripting

vulnerabilities

exist

in

via

a

soapenv:Body

element

or

in

the

status

parameter

to

login.html.


Multiple cross-site scripting (XSS) vulnerabilities in Synology Photo Station 6.0 before 6.0-2638 and 6.3 before 6.3-2962 allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) album name (2) file name of uploaded photos (3) description of photos or (4) tag of the photos.


Multiple cross-site scripting (XSS) vulnerabilities in Synology Video Station 1.2 before 1.2-0455 1.5 before 1.5-0772 and 1.6 before 1.6-0847 allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) file name or (2) collection name of videos.


An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title Comments or Description field to /skyboxview/webskybox/tickets in Change Manager.


jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option causing text/javascript responses to be executed.


An issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) attack occurs via a crafted pages/showObjects URI as demonstrated by appending a payload to a pages/showObjects/2/0/0/leafs URI.


Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direct request to secure/ConfigureReleaseNote.jspa which are not sanitized before being returned in an error page.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

index/siteforge-bugs-action/proj.siteforge

in

SiteForge

Collaborative

Development

Platform

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

or

parameters.


Multiple cross-site scripting (XSS) vulnerabilities in DKScript.com Dragon's Kingdom Script 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the (1) Subject and (2) Message fields in a do=write (aka Send Mail Message) action in gamemail.php; the (3) Gender (4) Country/Location (5) MSN Messenger (6) AOL Instant Messenger (7) Yahoo Instant Messenger and (8) ICQ fields in a do=onlinechar (aka Edit your Profile) action in index.php as accessed by dk.php; a javascript URI in the SRC attribute of an IMG element in the (9) Title and (10) Message fields in a do=new (aka Create Thread) action in general.php; and a javascript URI in the SRC attribute of an IMG element in unspecified fields in (11) other Forum posts and (12) Forum replies.


Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the tablewidth parameter in (a) counter.php; (2) the newdays parameter in (b) links.php; and the (3) tableborder (4) menucolor (5) textcolor and (6) bodycolor parameters in (c) menu.inc.php.


Cross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP 3.02 and earlier and AutoRank Pro 5.01 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Keyword parameter in search.php and the (2) Username parameter in main.cgi.


Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier and possibly 2.0 (trial) allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total parameters in (a) displaypic.asp and the (3) catname parameter in (b) displaythumbs.asp.


Multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5 and possibly earlier versions allow remote attackers to execute arbitrary web script or HTML via the (1) name (2) title (3) news (4) description and (5) sitename parameters.


details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter which leaks the path in an error message. NOTE: this might be resultant from another vulnerability since this vector also produces cross-site scripting (XSS). NOTE: on 20060829 the vendor notified CVE that this issue has been fixed.


Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php (2) item_id parameter in report.php (3) search_term parameter (aka the \search box\) in search_reviews.php (4) the profile field in usercp/profile_edit1.php and the (5) review field in review_form.php.


Cross-site scripting (XSS) vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the make_id parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PIC parameter in offers-pix.php (2) from parameter in cp/index.php and (3) action parameter in cp/admin_index.php.


Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3 4.1 before 4.1(3)SR4 4.2 before 4.2(3) and 4.3 before 4.3(1) allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp aka bugid CSCsb68657.


new_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication credentials via an IMG tag in the desc parameter (\Ticket Description\ field) that points to a URL that captures referer URLs possibly due to a cross-site scripting (XSS) vulnerability or a leak of credentials in referer URLs.


Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in codes-english.php and (2) the img parameter in picture.php after the name of an existing file.


Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName (\Title\ field) (2) url and (3) Description parameters possibly related to issues in add1.php.


Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbitrary web script or HTML via the i_cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter (2) refererpagesfilterex (3) urlfilterex (4) urlfilter (5) hostfilter or (6) hostfilterex parameters a different set of vectors than CVE-2006-1945.


Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web script or HTML via the mainpath parameter to (1) data/footer.php and (2) admin/header.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10 and 2.7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) f_user parameter in index.php the (2) pag parameter in messages.php or the (3) lid (4) tid and (5) sid parameters in error.php.


Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page which is not properly sanitized before being displayed in the error log.


Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors related to \certain characters in session names \ including special characters that are frequently associated with CRLF injection SQL injection cross-site scripting (XSS) and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric as implied in the PHP manual for session_name().


Multiple cross-site scripting (XSS) vulnerabilities in The Banner Engine (tbe) 4.0 allow remote attackers to execute arbitrary web script or HTML via the (1) text parameter in a search action to (a) top.php and the (2) adminpass or (3) adminlogin parameter to (b) signup.php.


Cross-site scripting (XSS) vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) browse parameter which is not filtered in the resulting error message and multiple unspecified input fields including those involved when (2) updating a profile (3) posting comments or entries in a blog (4) uploading files (5) picture captions and (6) sending a private message (PM).


Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) view_ad.php; (3) event_id parameter in (c) view_event.php (d) delete_event.php and (e) edit_event.php; and (4) group_id in (f) view_group.php.


Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name (2) message (aka comments) (3) website and (4) email parameters which bypasses XSS protection mechanisms that check for SCRIPT tags but not others as demonstrated by a javascript URI in an onMouseOver attribute and the src attribute in an iframe tag. NOTE: some vectors might overlap CVE-2006-2975 although the use of alternate manipulations makes it unclear.


Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags as demonstrated by the IMG tag in the (1) id parameter in (a) mail/index.php and (b) mail/reply.php; (2) login_id parameter in (c) members/is_online.php; (3) site_id parameter in (d) messenger/online.php (e) messenger/search.php and (f) messenger/profile.php; (4) contact_name parameter in messenger/search.php; (5) membername parameter in (g) messenger/profileview.php; (6) unspecified parameters used when \editing a profile\; and (7) cust_name parameter in (h) messenger/expire.php. NOTE: The vendor disputes the vectors involving files in the messenger directory stating \... the referenced folder 'messenger' was never available to the general public...\.


Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) next_template (2) start (3) curr_menu_id and (4) arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html template_name.


Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52 and other versions released before 06/18/2006 allows remote attackers to inject arbitrary web script or HTML via the from field. NOTE: some third party sources have mentioned the \to\ and \from\ fields although CVE analysis shows that these are associated with the previous version a different executable and a different CVE.


Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the username login field.


Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a \malicious URL\.


Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) maingroup and (2) secondgroup parameters to (a) search_prod_list.asp and the (3) maingroup parameter to (b) meny2.asp. NOTE: it is possible that this is resultant from SQL injection or a forced SQL error.


Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka enterprise edition) allow remote attackers to inject arbitrary web script or HTML via the (1) itemfor (aka \Who is this item for?\) and (2) special (aka \Special Instructions\) parameters to item.php which is accessed from showorder.php or (3) unspecified parameters to the login form at login.php.


Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php and (2) a PHPSESSID cookie in (b) lostpassword.php (c) gen_confirm_mem.php and (d) index.php.


Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) show_courses or (2) current_cat parameters to (a) admin/create_course.php show_courses parameter to (b) users/create_course.php (3) p parameter to (c) documentation/admin/ (4) forgot parameter to (d) password_reminder.php (5) cat parameter to (e) users/browse.php or the (6) submit parameter to admin/fix_content.php.


Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) shop name field in (a) editshop.php (b) edititem.php and (c) index.php; and via the (2) item field in editshop.php and edititem.php.


Multiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script or HTML via the (1) news_archive (2) language and (3) intranetLogin parameters in (a) index.php; the (4) sites_id parameter in (b) sites.php; and the (5) news_id parameter in (c) news_more.php.


Multiple cross-site scripting (XSS) vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the (1) \Your name\ field and (2) \Enter Prayer Request here\ field.


Cross-site scripting (XSS) vulnerability in index.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover within a URL. NOTE: the provenance of this information is unknown; the details are obtained solely from third party reports.


Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) ep parameter to search.php and the (2) subject parameter in comment.php (aka the Subject field when posting a comment).


Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the (1) name (2) email (3) add and (4) wName parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple unspecified cross-site scripting (XSS) vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the Search Tasks system or authenticated users via (2) the Edit Task system (3) the back-end Category Editor system and (4) \Pages that display task status email addresses URL customer and project information.\


Multiple cross-site scripting (XSS) vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the (1) name (2) address1 (3) address2 (4) county (5) postcode (6) email (7) phone or (8) mobile parameters to booking2.php.


Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter which is reflected in an error message. NOTE: on 20060829 the vendor notified CVE that this issue has been fixed.


Cross-site scripting (XSS) vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) read parameter in index.php (2) farea parameter in faq.php and (3) unspecified input fields on the \My Account\ login page.


Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier and 1.3.11sr6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in (1) lib-comment.php (1.4.0sr4) or (2) comment.php (0.3.11sr6).


Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters involving the (1) getUserStateFromRequest function and the (2) SEF and (3) com_messages modules.


Cross-site scripting (XSS) vulnerability in showprofile.php in Darren's $5 Script Archive osDate 1.1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the onerror attribute in an HTML IMG tag with a non-existent source file in txtcomment parameter which is used when posting a comment.


Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http (3) https or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer) (5) a javascript URI in the module parameter in services/help (aka the help viewer) and (6) the name parameter in services/problem.php (aka the problem reporting screen).


Cross-site scripting (XSS) vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the icq parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in EZGallery 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pUserID (2) aid (3) aname (4) uid and (5) m parameter in (a) common/galleries.asp; (6) aid (7) aname (8) uid (9) m (10) gp and (11) g parameter in (b) common/pupload.asp; and (12) msg (13) fn and (14) gp parameter in (c) common/upload.asp.


Cross-site scripting (XSS) vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors possibly including (1) calendar/myagenda.php (2) document/document.php (3) phpbb/newtopic.php (4) tracking/userLog.php and (5) wiki/page.php.


Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified parameters including the (1) frommethod (2) list and (3) method which are reflected in an error message. NOTE: some of these vectors might be resultant from SQL injection.


Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Home Rent allows remote attackers to inject arbitrary web script or HTML via the sel_menu parameter. NOTE: the vendor notified CVE on 20060823 that \All issues concerning this script and others at cescripts.com have been addressed and fixed.\


** DISPUTED ** Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter. NOTE: the vendor has disputed this report stating that they have been unable to replicate the issue and that \the userid parameter is run through our filtering system as an unsigned integer.\


Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before 20060501-0142-jam and possibly earlier versions dating back to 2006-02-23 might allow remote attackers to inject arbitrary web script or HTML via unknown vectors.


Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52 and other versions released before 05/12/2006 allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl and possibly (3) other unspecified vectors related to \openwebmailerror calls that need to display HTML.\


Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9 Java System Application Server 7 2004Q2 before Update 5 and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.


Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via (1) the judul_artikel parameter in teman.php and (2) the title of an article sent to admin which is displayed when unauthenticated users visit index.php.


Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL which is reflected back in an error message when trying to access a blocked web site.


Multiple cross-site scripting (XSS) vulnerabilities in addwords.php in MyScrapbook 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) comment parameters. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag as demonstrated using \javascript\.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

ashmans

and

Bill

Echlin

QaTraq

RC

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

and

parameters

in

top.inc

as

included

by

the

msg

and

parameters

in

(a)

(b)

and

(c)

the

title

version

and

content

parameters

in

the

and

parameters

in

the

title

and

content

parameters

in

the

title

version

and

content

parameters

in

the

and

parameters

in

the

parameter

in

download.php;

the

username

and

password

parameters

in

login.php;

the

title

version

and

content

parameters

in

the

content

parameter

in

the

title

and

content

parameters

in

the

content

title

version

and

content

parameters

in

the

content

parameter

in

the

msg

and

parameters

in

and

possibly

the

and

parameters

in

(d)

and

a

large

number

of

additional

parameters

and

executables.

NOTE:

the

vendor

notified

CVE

via

e-mail

that

this

issue

has

been

fixed

in

the

RC

release.


Multiple cross-site scripting (XSS) vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search (2) page and (3) action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter. NOTE: the same vector can be used for cross-site scripting but CVE analysis suggests that this is resultant from file inclusion of HTML or script.


Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in (a) emailtofriend.pl or (b) violation.pl (2) seller parameter in (c) vsoa.pl (3) user parameter in (d) userask.pl or (e) leavefeed.pl (4) itemnum parameter in userask.pl (5) category parameter in (f) itemlist.pl and the (6) query parameter in (g) search.pl.


Cross-site scripting (XSS) vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) sn20_special_cases parameter (\Special Cases\ field) in profile/mini.php (2) tyxx01_album_name parameter (\Album Name\ field) in profile/photo_create.php and the (3) u parameter in admin/user_view.php.


Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user_login (2) full_name and (3) URL parameters in register.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (4) cat_list and (5) key parameters in a certain portion of the admin interface.


Cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set as demonstrated by the \+ADw-SCRIPT+AD4-\ sequence.


Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904 when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the URL which is not sanitized before being returned in an error message when WebScarab is not able to access the URL.


Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response which has no server-side validation before being viewed via \View Attempt Details\ in the Gradebook.


Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the (1) first_name (2) last_name or (3) nickname parameters.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words (2) id (3) cat_id and (4) tim parameters which are not sanitized before being returned in an error page. NOTE: it is possible that some of these vectors are resultant from an SQL injection issue.


Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php and the type and show parameters in a top action are already covered by CVE-2006-1349; and the term parameter in a search action is already covered by CVE-2006-1806.


Multiple cross-site scripting (XSS) vulnerabilities in DwZone Shopping Cart 1.1.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ToCategory and (2) FromCategory parameters to (a) ProductDetailsForm.asp and (3) UserName and (4) Password parameters to (b) LogIn/VerifyUserLog.asp.


Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the (1) login parameter in admin/cms/index.php (2) unspecified parameters in the \Supply news\ page in formmail.php (3) the URL in the \Site statistics\ page and the (5) query_string parameter when performing a search.


Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: this might be resultant from another vulnerability since the XSS is reflected in an error message.


Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C allow remote attackers to \execute malicious scripts\ via unknown vectors (aka HS06-014-01).


Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) comment (2) email (3) homepage (4) id (5) name and (6) text parameters in (a) index.php the (7) comment (8) email (9) homepage (10) number (11) name and (12) text parameters in (b) admin/guestbook.php and the (13) email (14) homepage (15) icq (16) name and (17) text parameters in (c) admin/edit.php.


Cross-site scripting (XSS) vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the (1) event_id parameter to view-event-details.php or (2) select_events parameter to event-registration.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Pivot

and

earlier

when

is

enabled

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

fg

bg

and

parameters

in

(a)

includes/blogroll.php;

name

and

parameters

in

(b)

and

even

if

is

not

enabled

the

h

and

w

parameters

in

(c)

includes/photo.php.


Mozilla Firefox before 1.5.0.5 Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.


Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) msg_result and (2) rep_titre parameters in (a) read.php; and the (3) id and (4) parent parameters and (5) CSForum_nom (6) CSForum_mail and (7) CSForum_url cookie parameters in (b) ajouter.php.


Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the currency parameter in (1) loan.php and (2) mortgage.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the email (2) cond or (3) name parameters to (a) addressbook.view.php (4) the daysprune parameter to (b) index.php (5) the datato parameter to (c) compose.email.php and (6) the markas parameter to (d) read.markas.php.


http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1 and (2) Apache HTTP Server 1.3 before 1.3.35 2.0 before 2.0.58 and 2.2 before 2.2.2 does not sanitize the Expect header from an HTTP request when it is reflected back in an error message which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests as demonstrated using a Flash SWF file.


Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Room Rent allows remote attackers to inject arbitrary web script or HTML via the sel_menu parameter. NOTE: the vendor notified CVE on 20060823 that \All issues concerning this script and others at cescripts.com have been addressed and fixed.\


Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA) when in WebVPN clientless mode allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) dnserror.html and (2) connecterror.html aka bugid CSCsd81095 (VPN3k) and CSCse48193 (ASA). NOTE: the vendor states that \WebVPN full-network-access mode\ is not affected despite the claims by the original researcher.


Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension and begins with a GIF header followed by JavaScript code which is executed by Internet Explorer.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Open

Business

Management

(OBM)

allow

remote

attackers

to

inject

arbitrary

HTML

or

web

script

via

the

and

parameters

to

files

such

as

(a)

(b)

(c)

(d)

and

(e)


Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT.


Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field. NOTE: if this issue is limited to administrators and if it is expected behavior for administrators to be able to generate HTML then this is not a vulnerability.


Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via unknown vectors in (1) NmConsole/Tools.asp and (2) NmConsole/DeviceSelection.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0.11 and possibly other versions before 2.0.12 allows remote attackers to inject arbitrary web script or HTML via parameters that are set as global variables within the program as demonstrated using the table parameter to login.php.


Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name (2) email and (3) headline parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary HTML or web script via the dcid parameter to dc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. This issue appears to be independent from a different issue that involves the same vector.


Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage parameter to (a) edtalbum.asp or the (3) cat or (4) albumid parameter to (b) album.asp.


Multiple cross-site scripting (XSS) vulnerabilities in Ringlink 3.2 allow remote attackers to inject arbitrary web script or HTML via a JavaScript URI in the SRC attribute of an IMG element and possibly other manipulations in the ringid parameter in (1) next.cgi (2) stats.cgi or (3) list.cgi.


** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting (XSS) vulnerability in John Frank Asset Manager (AssetMan) 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via \any of its input.\ NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors. Perhaps this should not be included in CVE.


Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the (1) Titlesitename or (2) sitename parameter to (a) header.php (3) nuke_url parameter to (b) meta/meta.php (4) forum parameter to (c) viewforum.php (5) post_id (6) forum (7) topic or (8) arbre parameter to (d) editpost.php or (9) uname or (10) email parameter to (e) user.php.


Multiple cross-site scripting (XSS) vulnerabilities in Jadu CMS allow remote attackers to inject arbitrary web script or HTML via the (1) forename (2) surname (3) reg_email (4) email_conf (5) company (6) city (7) postcode or (8) telephone parameters to site/scripts/register.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string which is not properly filtered when it is accessed using the $_SERVER\PHP_SELF\ variable.


Cross-site scripting (XSS) vulnerability in index.cfm in Goss Intelligent Content Management (iCM) 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources.


Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as \cross-site scripting \ but that is inconsistent with the common use of the term.


Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear) allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra \iframe\ tagname within that element followed by a double \>\ which might bypass cleansing operations.


Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_subject and (2) msg_body parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errCode and (2) uid parameter in (a) default.asp and (3) dname parameter in (b) /admin/dns.asp and (c) /additional/regdomain_done.asp.


Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) toprated.php and (2) newcards.php. NOTE: the card_id vector is already covered by CVE-2006-1230.


Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a (1) .cfm or (2) .cfml file which reflects the result in the default error page.


Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1 (2) Pretty Guestbook 1 and (3) Smile Guestbook 1 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the pagina parameter.


Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) debut_image parameter in (a) article-album.php3 (2) date parameter in (b) rubrique.php3 and the (3) perso and (4) aide parameters to (c) an unknown script probably index.php.


Cross-site scripting (XSS) vulnerability in cat.php in PHP Pro Publish 2.0 allows remote attackers to inject arbitrary web script or HTML via the catname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) port (2) server and (3) user parameters. NOTE: it is possible that the affected version is actually 3.2.


Cross-site scripting (XSS) vulnerability in cgi-bin/guest in Community Architect Guestbook allows remote attackers to inject arbitrary web script or HTML by signing the guestbook which is displayed by fsguestbook.html. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via (1) the FID parameter in board.php and (2) the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612 (read.php) and CVE-2005-2566 (board.php).


Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a) index.php; (2) forumID parameter in index.php (b) newtopic.php and (c) reply.php; and (3) ID parameter to (d) edit.php.


Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php and the (2) nid parameter to (b) news_detail.php (c) email_story.php (d) thankyou.php (e) printable_view.php (f) tella_friend.php and (g) send_comments.php.


VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).


Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php (b) search_cat.php (c) search_price.php and (d) product_details.php in the cosmicshop directory for CosmicShoppingCart allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters as demonstrated by the (1) query parameter in search.php and the (2) data parameter in search_cat.php.


Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote attackers to inject arbitrary web script or HTML via the searchTerm parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) count parameter and possibly the (2) next (3) Year_the_news and (4) mo parameters. NOTE: the year and month vectors are already covered by CVE-2006-0333.


Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in pblguestbook.php in PBL Guestbook 1.31 allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of IMG tags in the (1) name (2) email and (3) website parameter which bypasses XSS protection mechanisms that check for SCRIPT tags but not IMG. NOTE: portions of this description's details are obtained from third party information.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

submit.asp

in

ASPScriptz

Guest

Book

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

and

form

fields.


Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher it is not clear whether this overlaps CVE-2004-2207.


Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email System (kmail) 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter to main.php ordner parameter to (2) main.php or (3) webdisk.php (4) draft parameter to compose.php or (5) m or (6) y parameter to calendar.php.


Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_simpleboard) as used in Mambo and Joomla! allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in \post ne topic\ in the Frontend (2) the Title (aka Community-Title) field in Simpleboard Configuration in the Backend Admin Panel and the (3) Name (aka Forum-Title) and (4) Name (aka Category-Title) fields in Simpleboard Administration in the Backend Admin Panel. NOTE: some sources have stated that the sb_authorname parameter is affected but it is unclear which field is related to it.


Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier Java System Web Server 6.1 SP4 and earlier Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors possibly involving error messages.


Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dn parameter in (a) compare_form.php (b) copy_form.php (c) rename_form.php (d) template_engine.php and (e) delete_form.php; (2) scope parameter in (f) search.php; and (3) Container DN (4) Machine Name and (5) UID Number fields in (g) template_engine.php.


Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5 and possibly other distributions including Light Standard and Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter in forum.php which is not properly handled in block_forum_topics.php and (2) item_id parameter in reviews.php which is not properly handled in block_reviews.php.


Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) del_folder (2) nick or (3) action parameters to (a) notes/index.php (4) curr parameter to (b) ipod/get_ipod.php and in (c) login.php.


Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting an article as demonstrated using a javascript URI in a Cascading Style Sheets (CSS) property of a STYLE attribute of an element.


Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in index.php and the (2) mytheme and (3) myskin parameters in multiple \p-themes\ index.inc.php files including (c) lowgraphic (d) classic (e) puzzle (f) simple and (g) ciao. NOTE: vectors 2 and 3 might be resultant from file inclusion issues.


Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the \search box\) (2) the prodid parameter in detail.php and the (3) cid parameter in products.php.


Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2 and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22 allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help (2) the get_image_info_abspath parameter to control/eventplayer and (3) the source_ip parameter to events.tar.


Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.


Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp (2) ProductIndex parameter to browse0.htm (3) rowcolor parameter to result.asp or (4) heading parameter to result.asp. NOTE: vectors 1 and 2 might be resultant from SQL injection.


Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) CFTOKEN parameter in (a) index.cfm and (3) CFTOKEN and (4) CFID parameter in (b) chat.cfm.


Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier as used with vBulletin 3.5.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u1 (2) m1 (3) m2 (4) m3 (5) m4 parameters.


Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary web scripts or HTML via failed SQL queries which is reflected in an error message.


Multiple cross-site scripting (XSS) vulnerabilities in post.php in SkyeBox 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information although it was likely prompted by a vague announcement from a researcher who incorrectly referred to the product as \SkyeShoutbox.\


** DISPUTED ** Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product. The vendor states \You cannot insert code in a wikipage or via URL parameters as they are all escaped before usage so nothing can be compromised at other sites.\


Cross-site scripting (XSS) vulnerability in inc/elementz.php in AliPAGER 1.5 allows remote attackers to inject arbitrary web script or HTML via the ubild parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. NOTE: this issue might be resultant from SQL injection.


Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) comentarii.php or (2) view.php. NOTE: this issue might be resultant from SQL injection.


Bugzilla 2.20rc1 through 2.20 and 2.21.1 when using RSS 1.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via a title element with HTML encoded sequences such as \>\ which are automatically decoded by some RSS readers. NOTE: this issue is not in Bugzilla itself but rather due to design or documentation inconsistencies within RSS or implementation vulnerabilities in RSS readers. While this issue normally would not be included in CVE it is being identified since the Bugzilla developers have addressed it.


Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.


Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a \_required\ field when the associated normal field is missing or empty which is not sanitized before being presented in an error message.


** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting (XSS) vulnerability in Marco M. F. De Santis Php-residence 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via \any of its input.\ NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors. Perhaps this should not be included in CVE.


Multiple cross-site scripting (XSS) vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mail (2) site (3) city (4) state (5) country and possibly (6) name fields which are viewed via viewguest.cgi.


Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in MediaWiki 1.6.x before r14349 allows remote attackers to inject arbitrary Javascript via unspecified vectors possibly involving the usage of the | (pipe) character.


Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject arbitrary web script or HTML via the recherche parameter in recherche.php. NOTE: other XSS vectors as reported in the original disclosure are resultant from other primary vulnerabilities that have separate CVE names.


Cross-site scripting (XSS) vulnerability in (1) addWeblog.php and (2) leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag.


Cross-site scripting (XSS) vulnerability in content_footer.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the print_url variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources.


Cross-site scripting (XSS) vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML via a BR element with an extraneous IMG tag and a STYLE attribute that contains \/**/\ comment sequences which bypasses the XSS protection scheme.


Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web script or HTML via inputs that are not properly validated when the page title is output possibly involving the $names variable.


Cross-site scripting (XSS) vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the banurl parameter to add.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the (1) listingid parameter to (a) images.php (b) index_other.php or (c) request_info.php; (2) propertyid parameter to (d) searchlookup.php (3) id parameter to (e) images.php or (4) agentid parameter to (f) request_info.php. NOTE: some of these issues might be resultant from SQL injection.


Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a \View Image\ on a broken image in which the SRC attribute contains a Javascript URL or (2) selecting \Show only this frame\ on a frame whose SRC attribute contains a Javascript URL.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by (1) posting a blog (2) posting a listing (3) posting an event (4) adding comments or (5) sending a message.


Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier 5.1.x before 5.1.1.12 and 6.0.2 up to 6.0.2.7 allows remote attackers to inject arbitrary web script or HTML via the URI which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as \faultfactor \ but this is likely erroneous.


Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' (equals) character which bypasses a restrictive regular expression that attempts to remove onmouseover and other events.


Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor but on 20060519 the vendor notified CVE that \We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues.\


Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML and steal cookies via unspecified vectors related to \XSS exploits\ in administrator functionality.


Cross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex+) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) username (2) password or (3) User-Agent HTTP header in the Hack Log.


Cross-site

scripting

(XSS)

vulnerability

in

ow-shared.pl

in

OpenWebMail

(OWM)

and

earlier

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

sessionid

parameter

in

openwebmail-send.pl

openwebmail-advsearch.pl

openwebmail-folder.pl

openwebmail-prefs.pl

openwebmail-abook.pl

openwebmail-read.pl

openwebmail-cal.pl

and

openwebmail-webdisk.pl.

NOTE:

the

openwebmail-main.pl

vector

is

already

covered

by


Multiple cross-site scripting (XSS) vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter and (2) unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the (1) name (aka nick) (2) email and (3) comment boxes; and via the (4) id parameter.


Multiple cross-site scripting (XSS) vulnerabilities in PRV.php in PhpRemoteView possibly 2003-10-23 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) f (2) d and (3) ref parameters and the (4) \MAKE DIR\ and (5) \Full file name\ fields.


Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as \<scr<script>ipt>\ in (1) offset and (2) days parameters in (a) tiki-lastchanges.php the (3) find and (4) offset parameters in (b) tiki-orphan_pages.php the (5) offset and (6) initial parameters in (c) tiki-listpages.php and (7) an unspecified field in (d) tiki-remind_password.php; and allow remote authenticated users with admin privileges to inject arbitrary web script or HTML via (8) an unspecified field in a metatags action in (e) tiki-admin.php the (9) offset parameter in (f) tiki-admin_rssmodules.php the (10) offset and (11) max parameters in (g) tiki-syslog.php the (12) numrows parameter in (h) tiki-adminusers.php (13) an unspecified field in (i) tiki-adminusers.php (14) an unspecified field in (j) tiki-admin_hotwords.php unspecified fields in (15) \Assign new module\ and (16) \Create new user module\ in (k) tiki-admin_modules.php (17) an unspecified field in \Add notification\ in (l) tiki-admin_notifications.php (18) the offset parameter in (m) tiki-admin_notifications.php the (19) Name and (20) Dsn fields in (o) tiki-admin_dsn.php the (21) offset parameter in (p) tiki-admin_content_templates.php (22) an unspecified field in \Create new template\ in (q) tiki-admin_content_templates.php and the (23) offset parameter in (r) tiki-admin_chat.php.


Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a \Security Leak to lock in HTML-Code \ possibly due to a cross-site scripting (XSS) vulnerability involving comments.


Multiple cross-site scripting (XSS) vulnerabilities in XiTi Tracking Script 6 and 7 RC allow remote attackers to inject arbitrary web script or HTML via (1) the xtref parameter in xiti.js and (2) an HTTP Referer header field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter in (a) store_special_offers.php and (b) store.php and (2) prod_id parameter in (c) product_info.php. NOTE: this issue might be resultant from SQL injection.