Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2 aka (2) HyperStop WebHost Directory 1.2 might allow remote attackers to inject arbitrary web script or HTML via the \write a review\ box. NOTE: since user reviews do not require administrator privileges and an auto-approve mechanism exists this issue is a vulnerability.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Leadhound

Full

and

LITE

and

probably

the

Network

Version

\Full

Version\

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

login

parameter

in

members.pl

and

the

logged

parameter

in

members.pl

and

the

parameter

in

and

the

banner

parameter

in

the

offset

parameter

in

and

the

date

parameter

in

and

the

dates

parameter

in

and

the

page

parameter

in

the

parameter

in

and

the

lost

password

field

in


Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in view.php and the (2) fSearchableText parameter in /search/simpleSearch.php.


Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate since the \viewpro\ string does not appear in the source code for version 1.0.2 of the product.


Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in stats.php and (2) unspecified inputs in lostid.php probably the searchthis parameter. NOTE: one or more of these vectors might be resultant from SQL injection.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in coolphp magazine allow remote attackers to inject arbitrary web script or HTML via the (1) op and (2) nick parameters and possibly the (3) 0000 (4) userinfo (5) comp_der (6) encuestas and (7) pagina parameters. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability. If it is site-specific then it should not be included in CVE.


Cross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced but not accessible to the general public.


Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in item.pl and (2) category parameter in itemlist.pl which reflects the XSS in an error message. NOTE: the affected version might be wrong since the current version as of 20060116 is 3.6.1.


Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) userid parameter in (a) jgs_galerie_slideshow.php and (b) jgs_galerie_scroll.php and the (2) katid parameter in (c) jgs_galerie_slideshow.php.


Cross-site scripting (XSS) vulnerability in rlink.php in Rlink 1.0.0 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier as used in products such as My Blog before 1.65 allows remote attackers to inject arbitrary Javascript via a javascript URI in an (1) img or (2) url BBcode tag.


Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000 XP and Server 2003 when the Encoding option is set to Auto Select allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL which is injected into an error message whose charset is set to UTF-7.


Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter which causes an XSS when the log file is viewed by the Web-Access-Log viewer.


Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 2.0a and 3.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Referer or (2) X-Forwarded-For headers in an HTTP request which are not properly handled when the administrator accesses Site Stats.


Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing \<\ character which is interpreted as a \>\ character by some web browsers but bypasses the blacklist protection in (1) the pnVarCleanFromInput function in pnAPI.php (2) the pnSecureInput function in pnAntiCracker.php and (3) the htmltext parameter in an edituser operation to user.php.


Cross-site scripting (XSS) vulnerability in admin_smilies.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as \onmouseover\ in the (1) smile_url or (2) smile_emotion parameters which bypasses a check for \<\ and \>\ characters.


Cross-site scripting (XSS) vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some sources claim that the affected parameter is \q\ but the only public archive of the original researcher notification shows an XSS manipulation in \Keywords\.


Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a url XCode tag in a posted message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the Subject header (2) the From header and (3) certain other unspecified headers.


Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: this candidate does not contain any actionable or distinguishing information. Perhaps it should not be included in CVE. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter but a correction was later provided. NOTE: followup posts have both disputed and confirmed the original claim.


Cross-site scripting (XSS) vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows and 03-00 through 03-00-/B on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the extended receiving box function.


Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page which is published without a check for hostile scripting.


Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) subcat parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


pmwiki.php in PmWiki 2.1 beta 20 with register_globals enabled allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name which causes PmWiki to unset the GLOBALS variable but not the GPC variable which creates resultant vulnerabilities such as remote file inclusion and cross-site scripting (XSS).


** DISPUTED ** Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function name as demonstrated using variations of the alert() function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when \Filtered HTML\ is enabled and since \Full HTML\ would not filter HTML by design perhaps this should not be included in CVE.


Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir (4) productId (5) docId (6) act and (7) catId parameters in index.php; and the (8) username field in a login action in index.php. NOTE: the cart.php/redir and index.php/searchStr vectors are already covered by CVE-2005-3152.


Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to (a) editquota.html or (b) dodelpop.html; (2) showtree parameter to (c) diskusage.html; or the (3) mon (4) year (5) target or (6) domain parameter to (d) stats/detailbw.html.


SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page. NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax.


Cross-site scripting (XSS) vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message as demonstrated by \java	script:.\ NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in register.php in DEV web management system 1.5 allows remote attackers to inject arbitrary web script or HTML via the \City/Region\ field (mesto variable). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3 as used in multiple scripts allows remote attackers to inject arbitrary web script or HTML via the cpaint_response_type parameter which is displayed in a resulting error message as demonstrated using a hex-encoded IFRAME tag.


Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML via the Subject field when sending private messages (privatemessages.php). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers which are stored in a log file and not sanitized when the administrator views the \Log\ page possibly using the ViewCommentsLog function.


Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) shout variables to (a) shout.php or the (3) title and (4) message variables to (b) guestbook.php.


Cross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web script or HTML via the product_id parameter as originally demonstrated for a custom mp3players_details.php program. NOTE: the name of the affected program might be installation-dependent but it has been identified as \product_details.php\ by some sources.


Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier Mozilla Firefox 1.0.7 and possibly earlier and Netscape 8.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property which does not require that the style sheet have the same origin as the web page as demonstrated by the compromise of a large number of LiveJournal accounts.


Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via a URL encoded expression in the query string in (1) index.php and (2) possibly certain other scripts which is not properly cleansed when accessed from the $_SERVER'PHP_SELF' variable.


Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the \Course name\ field in index.php when the frm parameter has the value \mine\ and (2) possibly certain other fields in unspecified scripts.


Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables including (1) a large number of dimensions or (2) long values which prevents HTML tags from being removed.


Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the html_error_occurred parameter in error.php (2) html_filter_select parameter in filter_prefs.php (3) html_no_mail parameter in no_mail.php the (4) page_line (5) prev and (6) next parameters in html_bottom_table.php and the (7) _SESSION'nocc_theme' parameter in footer.php.


Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter. NOTE: some sources say that the affected parameter is \date \ but the demonstration URL shows that it is \sort\.


Cross-site

scripting

(XSS)

vulnerability

in

MyBulletinBoard

(MyBB)

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

a

signature

containing

a

JavaScript

URI

in

the

SRC

attribute

of

an

IMG

element

in

which

the

URI

uses

SGML

numeric

character

references

without

trailing

semicolons

as

demonstrated

by

\&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116\.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) inf parameter; or when register_globals is enabled the (2) upperTemplate and (3) lowerTemplate parameters.


Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags as demonstrated using a bgcol parameter.


Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username field during the registration of a new account. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) \/*\ and \*/\ comments or (2) a newline in a \url\ specifier which is processed by certain web browsers including Internet Explorer.


Cross-site scripting (XSS) vulnerability in SMBCMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the text parameter which is used by the \Search Site\ field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1 when display_errors and html_errors are on allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.


Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) an email subject; (2) an encoded javascript URI as demonstrated using \java
script:\; or (3) when the Domino Web Access ActiveX control is not installed via an email attachment filename.


Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig action. NOTE: These are different attack vectors and probably a different vulnerability than CVE-2006-0218 and CVE-2006-0219.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Mantis

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

and

parameters

in

(a)

the

sort

parameter

in

(b)

the

parameter

in

(c)

and

the

title

parameter

in

(d)

NOTE:

item

might

be

subsumed

by


webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right_frame parameter. NOTE: this has been called a cross-site scripting (XSS) issue but it is different than what is normally identified as XSS.


** DISPUTED ** Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as (1) onfocus and (2) onblur in the \author's website\ field. NOTE: followup comments to the researcher's web log suggest that this issue is only exploitable by the same user who injects the XSS so this might not be a vulnerability.


Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET which is stored in the $QUERY_STRING variable. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) comment_poster (2) comment_poster_email (3) comment_poster_homepage and (4) comment_text parameters.


Cross-site scripting (XSS) vulnerability in phpBB 2.0.19 when \Allowed HTML tags\ is enabled allows remote attackers to inject arbitrary web script or HTML via a permitted HTML tag with ' (single quote) characters and active attributes such as onmouseover a variant of CVE-2005-4357.


Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.


Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the day parameter in calendar.php and (2) the input form in search.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. It is possible that this issue is resultant from an SQL injection problem in CVE-2005-4227.3 and CVE-2005-4227.13.


Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters or (3) via a javascript URI in the url parameter when adding a comment.


Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) Add URL and (2) Suggest Category module. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and earlier when magic_quotes_gpc is enabled allows remote attackers to inject arbitrary web script or HTML via the language parameter in a missing or translation operation.


Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inject arbitrary web script or HTML via a URL that is not sanitized before being returned as a link in \advanced details\. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6 and other versions before 0.8 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags that follow a \http://\ string which bypasses a regular expression check and (2) other unspecified attack vectors.


Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HTML via the EventText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML then leverage the attack to execute arbitrary programs or create new accounts via the (1) operation (2) command and (3) name parameters.


Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71 as used in multiple packages such as phpESP allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF.


Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL which is not properly sanitized from the resulting error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username which is recorded in a log file but not properly handled when the administrator uses the admin log utility to read the log file.


Cross-site scripting (XSS) vulnerability in search.php in MyBB (aka MyBulletinBoard) 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter as demonstrated by %3Cscript%3E.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter which is processed by an fopen call or (2) HTML or script in the page parameter which is returned to the client in an error message for the failed fopen call.


Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php.


Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name which is not filtered in the resulting error message.


Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) level (2) position (3) id and (4) action parameters to members_only/index.cgi and the (5) page parameter to customer_area/index.cgi.


Cross-site scripting (XSS) vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote attackers to inject arbitrary web script or HTML via the ShipMethod parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

txtForum

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

prev

next

and

parameters

in

(a)

index.php;

the

and

parameters

in

(b)

the

and

parameters

in

(c)

profile.php;

the

quote

and

tid

parameters

in

(d)

reply.php;

and

the

tid

sticked

and

mid

parameters

in

(e)


Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE) 1.2.4 and (2) Analysis Console for Intrusion Databases (ACID) 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the (a) back parameter to base_graph_main.php (b) netmask parameter to base_stat_ipaddr.php or (c) submit parameter to base_qry_alert.php within BASE or (d) query string to acid_main.php in ACID which causes the request URI ($_SERVER'REQUEST_URI') to be inserted into a refresh operation.


Cross-site scripting (XSS) vulnerability in RevoBoard 1.8 as derived from PunBB allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is not clear whether this is a site-specific issue; however the claimed codebase relationship with PunBB might be relevant.


Multiple cross-site scripting (XSS) vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) allwords or (2) oneword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) dir and (2) page_id parameter to (a) index.php and (3) userid parameter to (b) mailto.php. NOTE: it is possible that issues 1 and 2 are resultant from SQL injection.


Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dedicatedPlanID parameter to dedicated_order.php (2) sharedPlanID parameter to shared_order.php (3) plan_id parameter to customers/server_management.php and (4) email field to customers/forgotpass.php.


Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the (1) Site Description field in (a) admin_board.php the (2) Group name and (3) Group description fields in (b) admin_groups.php and (c) groupcp.php the (4) Theme Name field in (d) admin_styles.php and the (5) Rank Title field in (e) admin_ranks.php. NOTE: the profile.php/Current password vector is already covered by CVE-2006-1603.


Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php and (2) the first_name (3) last_name (4) email (5) password and (6) confirm_password parameters to (b) userinput.php. NOTE: the provenance of this information is unknown; the details are obtained from third party. In addition the lack of precision in the third party descriptions makes it unclear whether the named vectors are correct.


** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a login action via the (1) Account Name and (2) Username field. NOTE: the vendor has disputed this vulnerability saying that \it does not exist currently in the Bluepay 2.0 product \ and older versions might not have been affected either. As of 20060512 CVE has not formally investigated this dispute.


Cross-site scripting vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter which is not sanitized in the error message. NOTE: the vector in the shard parameter is not XSS and has been assigned a separate name.


Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script or HTML via the UserID parameter to (1) comment.php or (2) contact.php. NOTE: the profile.php/UserName vector is already covered by CVE-2005-2441.


Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the keyval parameter in pbpgst.cgi (2) the catsubno parameter in pblscg.cgi and (3) the listno parameter in pblsmb.cgi.


Cross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the AG_ID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8 Mozilla Suite before 1.7.13 and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS) attacks via unspecified vectors involving the window.controllers array.


Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the \Access to hash password\ issue is already covered by CVE-2006-0103.


Cross-site scripting (XSS) vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash (.SWF) video that contains a getURL function call which causes the video to be rendered without disabling ActionScript.


Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the search_term parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) message (2) name (3) url and (4) email parameters when commenting on a post. NOTE: the vendor has disputed some issues from the original disclosure but due to the vagueness of the dispute it is not clear whether the vendor is disputing this particular issue.


Multiple cross-site scripting (XSS) vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in view.php (2) keyword parameter in search.php and (3) image_id parameter in image.php. NOTE: it is possible that vectors 1 and 3 are resultant from SQL injection.


Cross-site scripting (XSS) vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword_list parameter to (a) index.php; (2) title (3) article (4) author and (5) keywords parameters to (b) submit_article.php; and (6) Question (7) Name and (8) Email parameters to (c) submit_question.php.


Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) Classic.view/thumbnail.php (2) Classic.view/gallery.php (3) Classic.view/detail.php or (4) Orange.view/detail.php; or (5) the name parameter in Orange.view/slideshow.php.


Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter. NOTE: this issue has been disputed in a followup post although the original disclosure might be related to reflected XSS.


** DISPUTED ** Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor has disputed this issue in a comment on the researcher's blog but research by CVE suggests that this might be a legitimate problem.


Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS.


Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter in addlink_lwp.cgi and the (2) id (3) forgotid and (4) forgotpass parameters in edit.cgi.


Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the event_desc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) result_type (2) search_in (3) nav (4) forums and (5) s parameters in the Search action to index.php; (6) st parameter to index.php with showtopics set to 1; (7) m (8) y and (9) d parameters in a calendar action; (10) t parameter in a Print action; (11) MID parameter in a Mail action; (12) HID parameter in a Help action; (13) active parameter in a search action; (14) sort_order (15) max_results or (16) sort_key parameter in a Members action.


Cross-site scripting (XSS) vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a BBCode url tag when using the show_post function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information some of which reference a source URL that appears to be for an unrelated issue.


CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS) poison caches or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field possibly when redirecting to other web pages.


Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang*file parameter which is injected into an error message. NOTE: this issue might be resultant from CVE-2006-1346.


Cross-site scripting (XSS) vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile possibly using the FormVal_profile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability. If it is site-specific then it should not be included in CVE.


Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) newuser_name (2) newuser_email and (3) newuser_hp parameters in the faction=register mode in index.php.


Cross-site scripting (XSS) vulnerability in the search action handler in index.php in Nils Asmussen (aka SCRIPTSOLUTION) Boardsolution 1.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the \Search for\ item (keyword parameter).


Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php the (5) errormsg parameter in (c) addcat.php (d) edituser.php (e) adduser.php and (f) editcat.php the (6) trackback_url parameter in (g) add.php (7) id parameter in (h) deluser.php (8) cat_id parameter in (i) delcat.php and (9) post_id parameter in (j) del.php as reachable from admin.php.


Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0 3.1.1 3.2 before 3.2.1b and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.


Multiple \unannounced\ cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.


Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag. NOTE: the email vector is already covered by CVE-2006-1625 although it might stem from the same core issue.


Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the gamename parameter in tellafriend.php (2) the login_status parameter in loginbox.php (3) the submissionstatus parameter in index.php the (4) cell_title_background_color and (5) browse_cat_name parameters in browse.php the (6) gamefile parameter in displaygame.php and (7) possibly other parameters in unspecified PHP scripts.


Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id (2) uploaded (3) card_fontsize or (4) card_color parameter. NOTE: the card_id vector was later reported to affect vCard 2.9 and the uploaded vector for 2.6.


Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ (2) AIM (3) MSN (4) Google Talk (5) Website Name (6) Website Address (7) Email Address (8) Location (9) Signature and (10) Sub-Titles fields in the user profile.


Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) calendar_id (2) style_sheet and (3) start parameters in (a) ViewDay.html; the (4) txtSearch and (5) opgSearch parameters in (b) ViewSearch.html; the (6) calendar_id and (7) approved parameters in (c) ViewYear.html; the (8) item_type_id parameter in (d) ViewCal.html; and the (9) week parameter in (e) ViewWeek.html.


Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) action (2) id (3) num (4) board (5) cat (6) real (7) viewcat (8) img or (9) curcatname parameter in cgi-bin/index.cgi or (10) vsSD parameter in /mods/calendar/index.cgi.


Multiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) tname or (2) fpost parameters to (a) post.php; (3) fullname (4) emailadd (5) country (6) sig or (7) otherav parameters to (b) editac.php; or (8) fullname (9) emailadd or (10) country parameters to (c) register.php.


Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8 Mozilla Suite before 1.7.13 and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments which allows remote attackers to conduct cross-site scripting (XSS) attacks.


Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) LOCATION and (2) URL parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: post-disclosure analysis by CVE suggests that the \page\ parameter is not used in this product and \id\ might be the affected parameter.


Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) from and (2) help parameters to (a) index.php; (3) action (4) page (5) debug (6) help (7) username or (8) password parameters to (b) login.php; the (7) help parameter to (c) pageindex.php; or (8) help parameter to (d) recentchanges.php.


MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php which allows remote attackers to initialize arbitrary variables that are processed by an @extract command which could then be leveraged to conduct cross-site scripting (XSS) or SQL injection attacks.


Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier with register_globals enabled allow remote attackers to inject arbitrary web script or HTML via the (1) its_url parameter in the documents page and (2) url parameter in the send_write page of (a) index.php; (3) subject and (4) images parameters to (b) calendar.php; (5) bid (6) replying_msg (7) subject (8) body and (9) mid parameters to (c) forums.php; (10) subject and (11) message parameters to (d) inbox.php; (12) subject_color and (13) email parameters to (e) lostpassword.php; and the (14) c_name (15) content_inicial and (16) cid parameters to (f) mycontents.php. NOTE: the calendar.php/day vector is already subsumed by CVE-2006-0220 and the calendar.php/month calendar.php/year and search.php/q parameters for calendar.php are already subsumed by CVE-2004-2511.


Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0 3.1.0 3.1.1 3.2 before 3.2.1b and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified inputs.


Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly including the (1) first_name and (2) last_name parameter in myaccounts.php. NOTE: portions of these details were obtained from third party sources instead of the original disclosure.


Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web script or HTML and gain leverage to execute arbitrary PHP code via the User-Agent HTTP header which is displayed by admin/modules/general/statistic.php in the administration panel.


Multiple cross-site scripting (XSS) vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error which is not properly handled when the error message is generated.


Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML possibly via the displayMsg parameter to archiveApplyDisplay.jsp aka bug ID CSCsc01095.


Multiple cross-site scripting (XSS) vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) ipAddress (2) act (3) username and (4) unspecified other parameters in (a) authuser.php; and the (5) username and (6) unspecified other parameters in (b) userstatistics.php.


Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to comments.php or (2) poll_id parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616.


Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser (2) pass (3) chatsys (4) room (5) username and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi.


Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event (2) Description (3) Time (4) Website and (5) Public Remarks fields to (a) eventpublisher_admin.htm and (b) eventpublisher_usersubmit.htm.


Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtDomainName parameter to domains.asp or (2) SearchText or (3) UserLevel parameters to default.asp.


Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x 3.0.0 3.1.0 3.1.1 3.2 before 3.2.1b and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.


Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat (2) num and (3) search parameters to (a) category.php and the (4) slideshow (5) show_metadata and (6) start parameters to (b) picture.php a different vulnerability than CVE-2006-1674.


Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module which is not properly handled in the administrator interface or (2) certain parameters to the login form.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Serge

Rey

gtd-php

(aka

Getting

Things

Done)

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

Description

field

in

newProject.php

newList.php

and

newWaitingOn.php;

the

Title

field

in

newProject.php

newList.php

newWaitingOn.php

newChecklist.php

newContext.php

and

newGoal.php;

the

Category

Name

field

in

newCategory.php;

the

listTitle

field

in

listReport.php;

the

projectName

field

in

projectReport.php;

and

the

checklistTitle

field

in

checklistReport.php.


Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url (2) city (3) state or (4) country parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information although it is likely that they are the result of post-disclosure analysis.


Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML (1) via the referer parameter in sendMail and via attributes of (2) the A element and certain other HTML elements in web pages edited with the editInBrowser module. NOTE: the msgReader$1 mode attack vector is already covered by CVE-2006-1769.


Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via (1) the actionID parameter in ads-readerext and (2) the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses this issue.


Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro) possibly 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) exam parameter in prequiz.asp or (2) msg parameter in student.asp.


Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the (1) adminJump and (2) forum_middle parameters in (a) forum.php and the (3) form parameter in (b) members.php (c) pm.php and (d) mail.php.


Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) adid or (2) aname parameter in (a) common/email.asp (b) users/users_search.asp or (c) users/users_profiles.asp; (3) page parameter in (d) users/users_calendar.asp; (4) usid parameter in (e) users/users_mgallery.asp; or (5) m parameter in (f) users/users_search.asp.


Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) newuser_realname and (2) newuser_icq parameters a different vector than CVE-2006-1768. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Description field. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via the cur_password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) uname (2) error (3) profile or (4) the username filed parameter to the (a) Your_Account module (5) catid (6) sid (7) Story Text or (8) Extended text text fields in the (b) News module (9) month (10) year or (11) sa parameter to the (c) Stories_Archive module (12) show (13) cid (14) ratetype or (15) orderby parameter to the (d) Web_Links module (16) op or (17) pollid parameter to the (e) Surveys module (18) c parameter to the (f) Downloads module (19) meta or (20) album parameter to the (g) coppermine module or the search box in the (21) Search (22) Stories_Archive (23) Downloads and (24) Topics module.


Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action (2) time parameter in planning.View.action and (3) userID parameter in user.View.action.


Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to inject arbitrary web script or HTML via the url parameter a different vulnerability than CVE-2006-1272. NOTE: 1.10 was later reported to be vulnerable.


Cross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script probably Search Engine or Site Search distributed individually and as part of Portal Pack 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.


Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2 and possibly other versions before 2.0.1 allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER'REQUEST_URI').


Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via the ublock parameter which is saved in the user's personal menu. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition it is unclear whether this issue is a vulnerability since it is related to the user's personal menu which presumably is not modifiable by others.


Multiple cross-site scripting (XSS) vulnerabilities in index.htm in Zwahlen Online Shop Freeware 5.2.2.50 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cat (2) Kat (3) id or (4) no parameters. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) ~urlmime or (2) ~command parameter different vectors than CVE-2003-0749.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Devellion

CubeCart

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

parameter

in

and

the

and

parameters

and

certain

language

parameters

in

admin/nav.php;

the

image

parameter

in

admin/image.php;

the

charset

and

certain

other

parameters

in

admin/header.inc.php;

the

parameter

in

footer.inc.php;

and

the

parameter

and

certain

other

parameters

in

header.inc.php.


Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/index.php (2) admin/pwlost.php and unspecified other files. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (CMS) before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML probably via arbitrary parameters in the query string as demonstrated with a vigilon parameter. NOTE: earlier downloads of 1.3.36 have the vulnerability; the software was updated without changing the version number.


Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topid (2) forid and (3) catid parameters to code/cp_forum_view.php; (4) choosed_language parameter to cp_dpage.php; (5) orderdir parameter to cp_links_search.php; (6) order_field parameter to (a) cp_show_ec_products.php and (b) cp_users_online.php; and the (7) signature and (8) fiscal code fields in the user profile.


Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter a different vector than CVE-2006-5074. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password fields in (a) login.asp (3) search field in (b) search.asp and (4) email field in (c) sendpassword.asp.


Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to injected data that is stored by a delivery script and displayed by the admin interface.


Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter a different vulnerability than CVE-2006-5631. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) the message parameter and possibly other parameters in module/shout/jafshout.php (aka the shoutbox); and (2) the message body in a forum post in module/forum/topicwin.php related to the name email title date ldate and lname variables.


Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) txtCompanyName (2) txtEmail or (3) txtUserAccNum parameter to (a) users.asp or the (4) setThemeColour parameter to (b) default.asp in the Reseller and Admin levels; or the (5) setThemeColour parameter to default.asp in the User level. NOTE: the txtDomainName parameter to domains.asp is covered by CVE-2006-1407 which suggests that this vector is fixed in 3.2.10 stable.


Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable probably obtained from the User-Agent HTTP header and possibly (2) the $ip_resolved variable.


** DISPUTED ** MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that \The vendor does not consider this a vulnerability.\


Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entryid parameter in comment.php (2) page parameter in index.php or the (3) uid parameter in user.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd) when ExtendedStatus is enabled and a public server-status page is used allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform \charset detection\ when the content-type is not specified.


Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject arbitrary web script or HTML via the (1) mod or (2) action parameters in index.php or the (3) pageid parameter in modules/pageedit/index.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) bg1 (2) bg2 (3) text or (4) size parameters. NOTE: the provenance of this information is unknown; details are obtained from third party sources.


** DISPUTED ** MySource Matrix 3.8 and earlier and MySource 2.x allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that \The vendor does not consider this a vulnerability.\


Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset a related issue to CVE-2006-0032.


Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name or (2) admin_pass parameter in (a) admin/login.php or the (3) admin_email parameter in (b) admin/password_forgotten.php.


Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) name (2) url (3) title and (4) about parameters in a forum post. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows remote attackers to inject arbitrary web script or HTML via UTF-7 or US-ASCII encoded characters which are injected into an error message as demonstrated by a request with a utf7 charset parameter accompanied by UTF-7 data.


Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) action (2) file and (3) users array variables in (a) admin.php which are not properly handled when the administrator views the Activity Log; and the (4) torrent parameter as used by the displayName variable in (b) startpop.php different vectors than CVE-2006-5227.


Multiple cross-site scripting (XSS) vulnerabilities in account_login.asp in A+ Store E-Commerce allow remote attackers to inject arbitrary web script or HTML via the (1) username (txtUserName) and (2) password (txtPassword) parameters. NOTE: portions of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to inject arbitrary web script or HTML via (1) an Access Point with a crafted SSID (2) the name of the sensor WIDS (3) the name of the Highwall EndPoint workstation or other unspecified vectors.


Cross-site scripting (XSS) vulnerability in smumdadotcom_ascyb_alumni/mod.php in SchoolAlumni Portal 2.26 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the katalog module. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user parameter to (a) CMD_SHOW_RESELLER or (b) CMD_SHOW_USER in the Admin level; the (2) TYPE parameter to (c) CMD_TICKET_CREATE or (d) CMD_TICKET the (3) user parameter to (e) CMD_EMAIL_FORWARDER_MODIFY (f) CMD_EMAIL_VACATION_MODIFY or (g) CMD_FTP_SHOW and the (4) name parameter to (h) CMD_EMAIL_LIST in the User level; or the (5) user parameter to (i) CMD_SHOW_USER in the Reseller level.


Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486 however due to the vagueness of the initial advisory and different researchers a new CVE was assigned.


Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not \1\ as demonstrated using script in the action parameter a different vulnerability than CVE-2006-5632.


Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the filename for downloading which is not quoted in an error message by the send_file_direct function and (2) the Type or Category values in a New entry which is not properly handled in an error message by the submit_elog function.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the Itemid parameter in a (1) com_contact or (2) subscribe action.


Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1 when Global Script Protection is not enabled allows remote attackers to inject arbitrary HTML and web script via unknown vectors possibly related to Linkdirect.cfm Topnav.cfm and Welcomedoc.cfm.


Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php (b) banner_statistics.php (c) countries.php (d) currencies.php (e) languages.php (f) manufacturers.php (g) newsletters.php (h) orders_status.php (i) products_attributes.php (j) products_expected.php (k) reviews.php (l) specials.php (m) stats_products_purchased.php (n) stats_products_viewed.php (o) tax_classes.php (p) tax_rates.php or (q) zones.php scripts in /admin and the (2) zpage parameter in (r) admin/geo_zones.php.


Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWV_FLOW_ITEM_HELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle has not publicly disputed claims by a reliable researcher that this has been fixed by the October 2006 CPU.


Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6 2.20.x before 2.20.3 2.22.x before 2.22.1 and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1 H2 and H3 HTML tags in global/header.html.tmpl (2) description fields of certain items in various edit cgi scripts and (3) the id parameter in showdependencygraph.cgi.


Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1) upnp:settings/state or (2) upnp:settings/connection parameters.


Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via (1) Bloks (2) Newnews (3) lBlok and (4) foooot parameter in (a) index.php; Newnews (5) newmsgs and Bloks parameter in (b) MobileNews.php; Newnews parameter in (c) polls.php; (6) cats parameter in (d) send.php; (7) footer parameter in (e) up.php; and (8) pagenav parameter in (f) cp/index.php.


Cross-site scripting (XSS) vulnerability in John Himmelman (aka DaRk2k1) PowerPortal 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly related to registering a user. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) \any field create name field\ except \create new group name\ or (2) any description field.


Cross-site scripting (XSS) vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/index.php and unspecified vectors related to certain other files. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via (1) the 404 error page of the Smart Sensor Edge Sensor; (2) the user name for a failed logon when displayed in the audit journals reviewing interface (/AirMagnetSensor/AMSensor.dll/XH) by the Smart Sensor Edge Sensor log viewer; and (3) an SSID of an AP when displayed on an ACL page (/Amom/Amom.dll/BD) of the Enterprise Server Status Overview in the Enterprise Server Web interface.


Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) basedemo.php and (2) calenderdemo.php in samples/ and other unspecified files.


Multiple cross-site scripting (XSS) vulnerabilities in Bartels Schoene ConPresso before 4.0.5a allow remote attackers to inject arbitrary web script or HTML via (1) the nr parameter in detail.php (2) the msg parameter in db_mysql.inc.php and (3) the pos parameter in index.php.


Cross-site scripting (XSS) vulnerability in the search functionality in db-central (dbc) Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple

unspecified

vulnerabilities

in

Oracle

Application

Express

(formerly

Oracle

HTML

DB)

up

to

have

unknown

impact

and

remote

attack

vectors

aka

Vuln#

and

NOTE:

as

of

it

is

likely

that

some

of

these

identifiers

are

associated

with

cross-site

scripting

(XSS)

in

and

but

these

have

been

provided

separate

identifiers.


Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) author (2) content or (3) title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related to CVE-2006-5486 however due to the vagueness of the initial advisory and different researchers it has been assigned a new CVE.


Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the query string (PHP_SELF) in kalender.php or (2) the captcha_session_code parameter in pre_details.php.


Multiple cross-site scripting (XSS) vulnerabilities in Wheatblog 1.0 and 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


admin/options.php in Extreme CMS 0.9 and possibly earlier does not require authentication which might allow remote attackers to conduct unauthorized activities. NOTE: this issue can be combined with another vulnerability to expand the scope of a cross-site scripting (XSS) attack without authentication. NOTE: the provenance of this information is unknown; details are obtained from third party sources.


Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter. NOTE: the provenance of this information is unknown; details are obtained from third party sources.


Multiple cross-site scripting (XSS) vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbitrary web script or HTML via the (1) start (2) CAT_ID (3) keyword (4) search_area (5) search_type (6) infield or (7) search_order parameter.


Multiple cross-site scripting (XSS) vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the statusmsg parameter in RegisterPage.cgi or (2) a URI corresponding to a nonexistent file. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in tiki-featured_link.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades filtering as demonstrated by a parameter value containing malformed nested SCRIPT elements.


Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script or HTML via easycart.php possibly related to the (1) des and (2) qty parameters in an add action and via other unspecified vectors. NOTE: some details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript which is rendered by Internet Explorer.


Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1 and the Drupal 4.7 Site Profile Directory (profile_pages.module) before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \lack of validation on output \ possibly in the name and title parameters.


Multiple cross-site scripting (XSS) vulnerabilities in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) m and (2) c parameters in index.php (3) a search action and (4) a \submit comment\ action.


Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function and (2) unspecified vectors related to the AntiCracker.


Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the (1) blog-category-description (2) blog-entry-title (3) rss-enclosure-url (4) technorati-tagsi or (5) blog-category-name parameter in a blog post.


Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite.


Cross-site scripting (XSS) vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) about (2) again (3) lastname (4) email (5) password (6) album (7) id (8) table (9) desc (10) doc (11) mname (12) max (13) htpl (14) pheader and possibly other parameters.


Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and (2) description elements within an item element in an RSS feed.


Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) description parameter in unspecified modules or the (2) solution parameter in the HelpDesk module.


Multiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.


Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the (1) game parameter in players mode the (2) weapon parameter in weaponinfo mode the (3) st parameter in search mode the (4) action parameter in actioninfo mode and the (5) map parameter in mapinfo mode.


Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified \code sequences\ that bypass the protection scheme.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Grayscale

BandSite

CMS

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

parameter

in

the

parameter

in

the

parameter

in

includes/footer.php

and

the

band

parameter

in

and

and

includes/content/

files

including

and


Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) email (2) websites and (3) groupAddName parameters in (a) save.php; the (4) errorMsg parameter in (b) index.php; and the (5) goTo and (6) search parameters in (c) search.php.


Cross-site scripting (XSS) vulnerability in user.module in Drupal 4.6 before 4.6.9 and 4.7 before 4.7.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: portions of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file (2) x and (3) y parameters in (a) admin/filemanager/preview.php; and the (4) email parameter in (b) admin/login.php.


Multiple cross-site scripting (XSS) vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly including the (1) profil_nr and (2) sprache parameters in the main portion of the portal the (3) suchstring field in suchForm in the main portion of the portal the (4) GaleryKey and (5) Breadcrumbs parameters in the gallerie module and the (6) GGBNSaction parameter in the ggbns module.


Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly involving (1) taarchives.cgi (2) ttaAuthentication.jsp (3) ttalicense.cgi (4) ttawlogin.cgi (5) ttawebtop.cgi (6) ttaabout.cgi or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.


Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null (\%00\) character which allows remote attackers to conduct cross-site scripting (XSS) read CGI program source code list directories and possibly execute programs.


Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter possibly related to the PHP_SELF variable. NOTE: Some details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) root_url and (2) dcp_version parameters in (a) admin/inc/footer.inc.php and the root_url (3) page_top_name (4) page_name and (5) page_options parameters in (b) admin/inc/header.inc.php.


Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6 Blackboard Learning and Community Portal Suite 6.2.3.23 and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript VBScript or HTML via (1) data (2) vbscript and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.


Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via (1) the query string to relocate.php (2) the globalspageid parameter in example-view/inc/print_button.php and other unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name (2) email or (3) url parameters; (4) certain content parameters in the preview method; or (5) the q parameter in (a) sitesearch.do.


Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names as injected into the vfolder_label form field in the IMP search screen.


Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode and possibly other versions before October 15 2006 allows remote attackers to inject arbitrary web script or HTML via the calendarID parameter.


Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php (2) the ticket_id parameter in support/open_tickets.php and (3) the cons_page_title parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

query

string

in

contact.php

download.php

admin.php

fpw.php

news.php

search.php

signup.php

submitnews.php

and

user.php.

NOTE:

the

provenance

of

this

information

is

unknown;

the

details

are

obtained

from

third

party

information.


Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML via the cat_name parameter related to adding a category. (categories field). NOTE: some details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Luke Hutteman SharpReader allow remote attackers to inject arbitrary web script or HTML via a web feed as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.


The popup blocker in Mozilla Firefox before 1.5.0.7 opens the \blocked popups\ display in the context of the Location bar instead of the subframe from which the popup originated which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.


Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category action in index.php or (2) the SearchWd parameter in an index search action in index.php.


Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL which is not properly sanitized before it is returned in an error page a different vulnerability than CVE-2004-1512.


Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Pathauto module before pathauto_node.inc 1.17.2.1 and the Drupal 4.6 Pathauto module before pathauto_node.inc 1.14.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123 and possibly other versions before 6.3.2 allows remote attackers to inject arbitrary web script or HTML via the (1) lineId and (2) sort parameters.


Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files aka \Cross Context Scripting.\


Cross-site scripting (XSS) vulnerability in index.php in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrary web script or HTML by uploading an attachment with a .pdf extension that contains JavaScript which is processed as script by Microsoft Internet Explorer 6.


Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html (2) Error (3) User.Theme.index and (4) and User.lang parameters.


Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script or HTML via the (1) languageAdmin name and (2) languageAdmin back parameters in (a) modules/blocks.php; the (3) languageRegister title and (4) languageRegister title2 parameters in (b) modules/register.php; the (5) languageMass-Email form title (6) languageMass-Email form desc (7) languageMass-Email form desc2 (8) languageMass-Email form desc3 and (9) languageMass-Email form desc4 parameters in (c) modules/mass-email.php; the (10) languageForgotten title (11) languageForgotten desc (12) languageForgotten desc2 (13) languageForgotten desc3 (14) languageForgotten desc4 and (15) languageForgotten desc5 parameters in (d) modules/register.php; and the (16) languageSearch view desc (17) languageSearch view desc2 (18) languageSearch view desc3 (19) languageSearch view desc4 (20) languageSearch view desc5 (21) languageSearch view desc6 (22) languageSearch view desc7 and (23) languageSearch view desc8 parameters in (e) modules/search.php.


Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.1.7 allows remote attackers to inject arbitrary web script or HTML via a url BBCode tag that contains a javascript URI with an SGML numeric character reference and an embedded space as demonstrated using \java& #115;cript \ a different vulnerability than CVE-2006-3761.


Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the replyuser parameter in (a) pm.php; (2) the txt_jumpto parameter in (b) dropdown.php; the (3) txt_error and (4) txt_templatenotexist parameters in (c) template.php; the (5) split parameter in certain files as demonstrated by (d) editprofile.php (e) search.php (f) index.php and (g) pm.php; and the (6) txt_login parameter in (h) loginline.php; and allow remote authenticated users to inject arbitrary web script or HTML via the (7) txt_logout parameter in (i) loginline.php.


Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL which is reflected back in a 404 (\Not Found\) error page. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.


Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project (OFBiz) and Opentaps 0.9.3 allows remote attackers to inject arbitrary web script or HTML via the SEARCH_STRING parameter a different issue than CVE-2006-6587. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) 0.9.9.4 and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4 formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31 allow remote attackers to inject arbitrary web script or HTML via the (1) id or email parameter to ticketview.php or (2) the email parameter to ticket.php.


Cross-site scripting (XSS) vulnerability in articles.asp in Expinion.net iNews Publisher (iNP) 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the hl parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in naprednaPretraga.php in LINK Content Management Server (CMS) allows remote attackers to inject arbitrary web script or HTML via the txtPretraga parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x-1.3 module for Drupal allows remote attackers to inject arbitrary web script or HTML via the Title field when editing a page. NOTE: some details were obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) email parameter to (a) scripts2/dochangeemail the (2) supporturl parameter to (b) cgi/addon_configsupport.cgi the (3) pkg parameter to (c) scripts/editpkg the (4) domain parameter to (d) scripts2/domts2 and (e) scripts/editzone the (5) feature parameter to (g) scripts2/dofeaturemanager and the (6) ndomain parameter to (h) scripts/park.


Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) key (2) d (3) l or (4) v parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: CVE disputes the l vector because l is validated by ctype_alpha before use.


Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the (1) lName (2) lURL (3) lImage and (4) lDescription parameters. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML via crafted e-mail messages. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the StrMes parameter in vf_info.asp and possibly (2) a URL in the SRC attribute of an IFRAME element that is submitted to vf_newtopic.asp.


Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the message title field when submitting an article to articles/edit.php (2) the message title field when submitting a blog post to blogs/post.php or (3) the message description field when editing in the Sandbox in wiki/edit.php.


Adobe ColdFusion MX 7.x before 7.0.2 does not properly filter HTML tags when protecting against cross-site scripting (XSS) attacks which allows remote attackers to inject arbitrary web script or HTML via a NULL byte (%00) in certain HTML tags as demonstrated using \%00script\ in a tag.


Cross-site scripting (XSS) vulnerability in display.php in Simple Machines Forum (SMF) 1.1 Final and earlier allows remote attackers to inject arbitrary web script or HTML via the contents of a file that is uploaded with the image parameter set which can be interpreted as script by Internet Explorer's automatic type detection.


Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to (a) admin/admincore.php the (2) month parameter to (b) admin/comments.php or (c) admin/entries.php or the (3) page parameter to (d) admin/logs.php different vectors than CVE-2006-5064.


Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Message or (2) Your Name field. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130 when used with Sun Java System Application Server or Sun Java System Web Server allows remote attackers to bypass HTTP request filtering hijack web sessions perform cross-site scripting (XSS) and poison web caches via unspecified attack vectors.


Multiple cross-site scripting (XSS) vulnerabilities in WikiTimeScale TwoZero before 2.31 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the (1) forum module and (2) event descriptions. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewlink operation in mod.php (2) the intypeid parameter in a showinfo operation in the informasi module in mod.php (3) the \your Friend\ field in friend.php or (4) the \Main Text\ field in admin.php.


Multiple cross-site scripting (XSS) vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com_jce) allow remote attackers to inject arbitrary web script or HTML via the (1) img (2) title (3) w or (4) h parameter different vectors than CVE-2006-6166. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in CM68 News allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.