Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0 and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a form field's help text to (1) Forms module's form builder or (2) App Builder module's object form view's form builder.


ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform Stored Cross-Site Scripting (XSS) attacks.


Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via parameters on user profile system_info and accounts management.


Cross-site scripting (XSS) vulnerability in Journal module's web content display configuration page in Liferay Portal 7.1.0 through 7.3.3 and Liferay DXP 7.0 before fix pack 94 7.1 before fix pack 19 and 7.2 before fix pack 8 allows remote attackers to inject arbitrary web script or HTML via web content template names.


Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters.


Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2


Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table.


Cross-site scripting (XSS) vulnerability in the Asset module's asset categories selector in Liferay Portal 7.3.3 through 7.4.0 and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of a asset category.


PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.


A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's permissions including an administrator. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S19; 15.1 versions prior to 15.1R7-S10; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S10 18.4R3-S9; 19.1 versions prior to 19.1R2-S3 19.1R3-S6; 19.2 versions prior to 19.2R1-S8 19.2R3-S3; 19.3 versions prior to 19.3R2-S6 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S2 20.4R3; 21.1 versions prior to 21.1R1-S1 21.1R2; 21.2 versions prior to 21.2R1-S1 21.2R2.


A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an authenticated attacker to view data change settings or impact availability of the software when the user visits a page containing the injected payload. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)


In Teedy versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page a low privileged attacker can store malicious scripts in the name of the Tag. In the worst case the victim who inadvertently triggers the attack is a highly privileged administrator. The injected scripts can extract the Session ID which can lead to full Account Takeover of the administrator and privileges escalation.


IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218367.


IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223720.


Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.


VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to insufficient sanitization and validation in VMware Workspace ONE Boxer calendar event descriptions a malicious actor can inject script tags to execute arbitrary script within a user's window.


The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a result attacker could make a logged in admin create or edit arbitrary quote and put Cross-Site Scripting payloads in them


IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224164.


IBM QRadar 7.3 7.4 and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220041.


A reflected Cross-site Scripting (XSS) vulnerability in J-Web of Juniper Networks Junos OS allows a network-based authenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web. This may allow the attacker to gain control of the device or attack other authenticated user sessions. This issue affects: Juniper Networks Junos OS All versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R3-S3; 19.3 versions prior to 19.3R2-S6 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S4; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R1-S1 21.1R2.


IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.


In Directus versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar and when an admin or another user opens it the XSS payload gets triggered.


IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218370.


Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary script via name parameters.


A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior) Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior) fellerLYnk (V2.6.2 and prior)


IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system including cross-site scripting cache poisoning or session hijacking. IBM X-Force ID: 220038


IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440.


The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not sanitise and escape the id parameter before outputting it back in an attribute leading to a Reflected cross-Site Scripting


Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/configure.php via the parameter footer_info.


Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75 Ver.2.9.x series versions prior to Ver.2.9.40 Ver.2.10.x series versions prior to Ver.2.10.44 Ver.2.11.x series versions prior to Ver.2.11.42 and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. This vulnerability is different from CVE-2022-24374.


Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.


On BIG-IP DNS & GTM version 16.x before 16.1.0 15.1.x before 15.1.4 14.1.x before 14.1.4.4 and all versions of 13.1.x 12.1.x and 11.6.x a DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.


A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below 6.9.9 and below 6.8.9-HF2 and below 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.


The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability.


A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6 which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent.


Jenkins Publish Over SSH Plugin 1.22 and earlier does not escape the SSH server name resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.


CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.


Jenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.


A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.


jQuery Cookie 1.4.1 is affected by prototype pollution which can lead to DOM cross-site scripting (XSS).


Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any operation using the acquired authentication information by injecting a malicious script in the URL of a monitoring screen delivered from the MC Works64 server or MobileHMI server to an application for mobile devices and leading a legitimate user to access this URL.


svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available.


A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application \Online Help\ in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.


laminas-form is a package for validating and displaying simple and complex forms. When rendering validation error messages via the `formElementErrors()` view helper shipped with laminas-form many messages will contain the submitted value. However in laminas-form prior to version 3.1.1 the value was not being escaped for HTML contexts which could potentially lead to a reflected cross-site scripting attack. Versions 3.1.1 and above contain a patch to mitigate the vulnerability. A workaround is available. One may manually place code at the top of a view script where one calls the `formElementErrors()` view helper. More information about this workaround is available on the GitHub Security Advisory.


Zulip is an open source team chat app. The `main` development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with several participants; a victim who then opens an overflow tooltip including this full name on the recent topics page could trigger execution of JavaScript code controlled by the attacker. Users running a Zulip server from the main branch should upgrade from main (2022-03-01 or later) again to deploy this fix.


The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape their Form Name which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0 Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin did not properly escape its output leading to the input text being inserted into the DOM as HTML code. Server-side usage of Prism is not impacted. Websites that do not use the Command Line plugin are also not impacted. This bug has been fixed in v1.27.0. As a workaround do not use the command line plugin on untrusted inputs or sanitize all code blocks (remove all HTML code text) from all code blocks that use the command line plugin.


CodeIgniter4 is the 4.x branch of CodeIgniter a PHP full-stack web framework. A cross-site scripting (XSS) vulnerability was found in `API\\ResponseTrait` in Codeigniter4 prior to version 4.1.8. Attackers can do XSS attacks if a potential victim is using `API\\ResponseTrait`. Version 4.1.8 contains a patch for this vulnerability. There are two potential workarounds available. Users may avoid using `API\\ResponseTrait` or `ResourceController` Users may also disable Auto Route and use defined routes only.


Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability.


GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9.5.7 contains a patch for this issue. There are no known workarounds.


ShortDescription is a MediaWiki extension that provides local short description support. A cross-site scripting (XSS) vulnerability exists in versions prior to 2.3.4. On a wiki that has the ShortDescription enabled XSS can be triggered on any page or the page with the action=info parameter which displays the shortdesc property. This is achieved using the wikitext `{{SHORTDESC:<img src=x onerror=alert()>}}`. This issue has a patch in version 2.3.4.


Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter. The XSS payload will be executed when a legitimate user attempts to review history.


Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML content thru the Grafana datasource or plugin proxy and trick a user to visit this HTML page using a specially crafted link and execute a Cross-site Scripting (XSS) attack. The attacker could either compromise an existing datasource for a specific Grafana instance or either set up its own public service and instruct anyone to set it up in their Grafana instance. To be impacted all of the following must be applicable. For the data source proxy: A Grafana HTTP-based datasource configured with Server as Access Mode and a URL set the attacker has to be in control of the HTTP server serving the URL of above datasource and a specially crafted link pointing at the attacker controlled data source must be clicked on by an authenticated user. For the plugin proxy: A Grafana HTTP-based app plugin configured and enabled with a URL set the attacker has to be in control of the HTTP server serving the URL of above app and a specially crafted link pointing at the attacker controlled plugin must be clocked on by an authenticated user. For the backend plugin resource: An attacker must be able to navigate an authenticated user to a compromised plugin through a crafted link. Users are advised to update to a patched version. There are no known workarounds for this vulnerability.


A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.


The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain unauthorized access to that user's account through the stolen cookie.


Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Cisco Unified CM Session Management Edition (Unified CM SME) and Cisco Unity Connection could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information.


Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names and label descriptions resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.


A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface.


A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics formerly Stealthwatch Enterprise could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the authentication component of Cisco Webex Meetings. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the (a) NodeID and (b) action parameters to the default URI and the (c) NodeID parameter to the default URI for the admin section; and allow remote authenticated users to inject arbitrary web script or HTML via the (d) Title (aka page name) and (e) Url fields in a (1) new or (2) modified page.


Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2 a module for Drupal allows remote authenticated users with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms to inject arbitrary web script or HTML via \Parent and related terms.\


Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6 a module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature. NOTE: vector 2 is only exploitable by users with administer views permissions.


Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08 4.2.2GA 4.3 before 4.3.0.CP07 and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName (2) objectName (3) attribute or (4) period parameter to createSnapshot.jsp or the (5) monitorName (6) objectName (7) attribute (8) threshold (9) period or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_admin_login.asp (2) z_forgot.asp and possibly unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected.


Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web script or HTML via (1) the returnto parameter to makepoll.php (2) the returnto parameter in a delete action to polls.php or the (3) Info or (4) Avatar field to my.php.


Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header a related issue to CVE-2009-1312. NOTE: it was later reported that 10.00 Beta 3 Build 1699 is also affected.


Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php view parameter to (2) login.php and (3) viewlisting.php page parameter to (4) searchresults.php and (5) toplistings.php and (6) member parameter to viewmember.php.


Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0 allow remote attackers to inject arbitrary web script or HTML by entering an unspecified URL in (1) the self-service UI interface or (2) the console interface. NOTE: it was later reported that 4.6.0 is also affected by the first vector.


Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) component and (2) priority parameters to buglist.php; and the (3) Username (4) E-mail (5) Pass and (6) Confirm pass fields to createaccount.php.


Cross-site scripting (XSS) vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the (1) courseid parameter to enrolments/step1.php or the (2) search or (3) siteid parameter to files/shared_list.php.


Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5 Desktop Workstation 5 and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter related to \invalid HTML.\ NOTE: this is due to a missing fix for CVE-2009-0781.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the URI (2) the q parameter (3) the nick parameter or (4) the nick parameter in a bantest action.


Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) sort parameter to pivot/index.php (3) the value of a check array parameter in a delete action to pivot/index.php (4) the element name in a check array parameter in a delete action to pivot/index.php (5) the edituser parameter in an edituser action to pivot/index.php (6) the edit parameter in a templates action to pivot/index.php (7) the blog parameter in a blog_edit1 action to pivot/index.php (8) the cat parameter in a cat_edit action to pivot/index.php (9) a certain form field in a doaction=1 request to pivot/index.php (10) the url field in a my_weblog edit_prefs action to pivot/user.php or (11) the username (aka name) field in a my_weblog reg_user action to pivot/user.php.


Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1 4.0.x before 4.0.3.1 4.1.x before 4.1.2.1 and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users to inject arbitrary web script or HTML via the Description field. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the (1) search or (2) tag parameters; (3) arbitrary invalid parameter names that are not properly handled when triggered on a column; (4) bookmark parameter in an edit action; or (5) email parameter in a remember action.


Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) an enter_parol cookie to index.php in an auto action or (2) the topic parameter to message.php. NOTE: vector 2 can be leveraged for a cross-site scripting (XSS) attack.


Multiple clientless SSL VPN products that run in web browsers including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products when running in configurations that do not restrict access to the same domain as the VPN retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks read cookies that originated from other domains access the Web VPN session to gain access to internal resources perform key logging and conduct other attacks. NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design.


Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document related to a \cross origin wrapper bypass.\


Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the scheduler title in the scheduler module and the (2) atksearchcontractnumber (3) atksearch_AE_customercustomer (4) atksearchmodecontracttype and possibly (5) atksearchcontractname parameters to the Organization Contracts administration page reachable through dispatch.php.


Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) curdirpath parameter to main/document/slideshow.php and the (2) file parameter to main/exercice/testheaderpage.php.


Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the (1) _SESSIONhandle parameter to (a) home.php (b) books/allbooks.php or (c) books/home.php; or the (2) home parameter to (d) i_head.php or (e) i_nav.php or (f) allbooks.php (g) home.php or (h) i_nav.php in books/.


Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header a related issue to CVE-2009-1312.


Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Title field to requests.php related to viewrequests.php; and (2) the Torrent Name field to torrents-upload.php related to the logging of torrent uploads; and allow remote attackers to inject arbitrary web script or HTML via (3) the ttversion parameter to themes/default/footer.php the (4) SITENAME and (5) CURUSERusername parameters to themes/default/header.php (6) the todayactive parameter to visitorstoday.php (7) the activepeople parameter to visitorsnow.php (8) the faq_categ999title parameter to faq.php and (9) the keepget parameter to torrents-details.php.


Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1 a module for Drupal allows remote authenticated users with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms to inject arbitrary web script or HTML via (1) vocabulary names (2) synonyms and (3) term names.


Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to assets/js/ddcart.php the (2) prefix parameter to includes/ajax/getstate.php the search parameter to (3) index.php and (4) search.php the (5) redirect parameter to login.php and the (6) product parameter to productdetail.php.


CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte).


Multiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1 4.0.x before 4.0.3.1 4.1.x before 4.1.2.1 and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allow remote attackers to inject arbitrary web script or HTML via invalid values for numerical parameters as demonstrated by an uncaught java.lang.NumberFormatException exception resulting from (1) the typeId parameter to mastheadAttach.do (2) the eid parameter to Resource.do and (3) the u parameter in a view action to admin/user/UserAdmin.do. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) type and (2) func parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the returnto parameter to login.php or (2) the returnto parameter in a delete action to news.php. NOTE: this can be leveraged for cross-site scripting (XSS) by redirecting to a data: URI.


Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28 2.0.172.37 and 3.0.193.2 Beta are also affected.


Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_loginfailed.asp (2) z_admin_login.asp (3) z_forgot.asp and possibly unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers and HP Digital Senders allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script.


Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier Application Management Suite (AMS) before 2.0.0.SR4 Hyperic HQ Open Source before 4.2.x Hyperic HQ 4.0 Enterprise before 4.0.3.2 and Hyperic HQ 4.1 Enterprise before 4.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the description field and unspecified \input fields.\


Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical \overlong Unicode\ in place of blacklisted characters.


Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) browse_ladies.php and (2) browse_men.php the (3) gender parameter to search.php and the (4) id parameter to services.php.


The web interface in CUPS before 1.4.2 as used on Apple Mac OS X before 10.6.2 and other platforms does not properly handle (1) HTTP headers and (2) HTML templates which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface (b) the configuration of the print system and (c) the titles of printed jobs as demonstrated by an XSS attack that uses the kerberos parameter to the admin program and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.


Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted user_homepage parameter to member.php and then posting a comment associated with a picture.


Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search_term parameter to main/auth/courses.php; the (2) frm_title and (3) frm_content parameters in a new personal agenda item action; the (4) title and (5) tutor_name parameters in a new course action; and the (6) student and (7) course parameters to main/mySpace/myStudents.php. NOTE: vectors 2 and 3 might only be exploitable via a separate CSRF vulnerability.


Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users with \use date tools\ or \administer content types\ privileges to inject arbitrary web script or HTML via a \Content type label\ field.


Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier 4.1.x before 4.1.13 4.2.x before 4.2.10 and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the sanitizing algorithm.


Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to config/edituser.php; (2) location (3) sessionid and (4) vmname parameters to console.php; (5) vmrefid and (6) vmname parameters to forcerestart.php; and (7) vmname and (8) vmrefid parameters to forcesd.php. NOTE: some of these details are obtained from third party information.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

WebWorks

Help

through

in

VMware

vCenter

before

Update

Build

VMware

Server

VMware

ESX

VMware

Lab

Manager

VMware

vCenter

Lab

Manager

and

before

VMware

Stage

Manager

before

WebWorks

Publisher

through

WebWorks

Publisher

and

WebWorks

ePublisher

through

through

and

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

reachable

through

index.html

and

wwhsec.htm

or

the

window.opener

component

in

related

to

(a)

unspecified

parameters

and

(b)

messages

used

in

topic

links

for

the

bookmarking

functionality.


Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the (1) page (2) bt_code and (3) b_no parameters in a board view action.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in LinkorCMS 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the searchstr parameter in a search action; or the (2) nikname (3) realname (4) homepage or (5) city parameter in a registration action.


Cross-site scripting (XSS) vulnerability in search_advance.php in ArticleFriend Script allows remote attackers to inject arbitrary web script or HTML via the SearchWd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php and the (3) show parameter to main.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Opera 9.52 and earlier and 10.00 Beta 3 Build 1699 does not properly block data: URIs in Location headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site.


Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter. NOTE: this was originally reported for tbmnet.php but that program does not exist in the TBmnetCMS 1.0 distribution.


McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability.


Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header (3) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header; and does not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (5) injecting a Location HTTP response header or (6) specifying the content of a Location HTTP response header.


Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrary web script or HTML via the sName parameter (aka the name field). NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed related to the rendering of the application/rss+xml content type as \scripted content.\ NOTE: the vendor reportedly considers this behavior a \design feature \ not a vulnerability.


Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET.


Multiple cross-site scripting (XSS) vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the (1) view and (2) section parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the Bibliography (aka Biblio) module 6.x-1.6 for Drupal allows remote authenticated users with certain content-creation privileges to inject arbitrary web script or HTML via the Title field probably a different vulnerability than CVE-2009-3479.


python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.


Mozilla Firefox 3.0.13 and earlier 3.5 3.6 a1 pre and 3.7 a1 pre does not properly block data: URIs in Location headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site.


Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary web script or HTML via the calendar parameter. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to newprofile.html; the (2) firstname (3) lastname and (4) company parameters to signup/signup.html; and the (5) firstname (6) lastname and (7) address0.street1 parameters to contact.html.


Cross-site

scripting

(XSS)

vulnerability

in

in

Kayako

SupportSuite

and

eSupport

and

earlier

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

unspecified

vectors

in

the

staff

control

panel

a

different

vector

than


Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6 a module for Drupal allows remote attackers with \create content displayed by the Bibliography module\ permissions to inject arbitrary web script or HTML via a title.


Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8 and SeaMonkey before 2.0.3 does not properly restrict read access to object properties in showModalDialog which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.


Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; allow remote attackers to inject arbitrary web script or HTML via the (1) crafted number preferences that are not properly handled in the preference system (services/prefs.php) as demonstrated by the sidebar_width parameter; or (2) crafted unknown MIME \text parts\ that are not properly handled in the MIME viewer library (config/mime_drivers.php).


Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI (2) entering a javascript: URI when specifying the content of a Refresh header (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header.


Multiple cross-site scripting (XSS) vulnerabilities in the ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10 a module for Drupal allow remote authenticated users with \administer imagecache\ permissions to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5 and the Service Provider 1.3.x before 1.3.5 and 2.x before 2.3 in Internet2 Middleware Initiative Shibboleth allow remote attackers to inject arbitrary web script or HTML via URLs that are encountered in redirections and appear in automatically generated forms.


The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified \access check \ which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors related to a user's visit to a different web server that hosts an SVG document.


Multiple cross-site scripting (XSS) vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the notice parameter to editform.php (2) the edit_user_message parameter to core/edit_user_message.php or (3) the user_title parameter to inc/head.inc.php reachable through any PHP script.


Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0 a module for Drupal allows remote authenticated users with 'administer content types' permissions to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.


Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the operation parameter to ReqWebHelp/advanced/workingSet.jsp or the (2) searchWord (3) maxHits (4) scopedSearch or (5) scope parameter to ReqWebHelp/basic/searchView.jsp.


Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6 Horde Groupware before 1.2.5 and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php (2) cmdshell.php or (3) sqlshell.php in admin/ related to the PHP_SELF variable.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Search

engine

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

parameter

to

category

parameter

to

id

parameter

to

and

key

parameter

to

and

and

name

parameter

to

and


Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier 4.1.x before 4.1.13 4.2.x before 4.2.10 and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.


Cross-site scripting (XSS) vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6 as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when distributed 20090629 or earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Mozilla Firefox 3.0.13 and earlier 3.5 3.6 a1 pre and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: in some product versions the JavaScript executes outside of the context of the HTTP site.


Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter.


Mozilla Firefox 3.0.13 and earlier 3.5 3.6 a1 pre and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location HTTP response header or (2) specifying the content of a Location HTTP response header.


Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to (1) Wizard_tracking.asp (2) wizard_oe2.asp (3) your-register.asp (4) main-whyregister.asp and (5) your.asp in home/ and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed which allows remote attackers to conduct cross-site scripting (XSS) attacks and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions via a crafted feed related to the rendering of the application/rss+xml content type as \scripted content.\


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Amiro.CMS

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

parameter

to

/news

/comment

/forum

/blog

and

/tags;

the

parameter

to

forum.php

discussion.php

guestbook.php

blog.php

news.php

locales.php

and

in

a

crafted

IMG

BBcode

tag

in

the

message

body

of

a

forum

guestbook

or

comment;

the

content

of

an

avatar

file

which

is

not

properly

handled

by

Internet

Explorer;

and

the

loginname

parameter

(aka

username)

in


The default configuration of Adobe Reader and Acrobat 9.x before 9.3 and 8.x before 8.2 on Windows and Mac OS X does not enable the Enhanced Security feature which has unspecified impact and attack vectors related to a \script injection vulnerability \ as demonstrated by Acrobat Forms Data Format (FDF) behavior that allows cross-site scripting (XSS) by user-assisted remote attackers.


Multiple cross-site scripting (XSS) vulnerabilities in the Print (aka Printer e-mail and PDF versions) module 5.x before 5.x-4.8 and 6.x before 6.x-1.8 a module for Drupal allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4 5.x-8.x before 5.x-8.1 and 6.x-1.x before 6.x-1.4 a module for Drupal allows remote authenticated users with create or edit group nodes permissions to inject arbitrary web script or HTML via the User-Agent HTTP header a different issue than CVE-2008-3095.


Cross-site scripting (XSS) vulnerability in phpspot PHP BBS PHP Image Capture BBS PHP & CSS BBS PHP BBS CE PHP_RSS_Builder and webshot dated before 20090914 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies.


Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via \external client input\ that triggers crafted error messages.


Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI (2) entering a javascript: URI when specifying the content of a Refresh header (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header; does not properly block data: URIs in Location headers in HTTP responses which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header; and does not properly handle javascript: URIs in HTML links within (a) 301 and (b) 302 error documents sent from web servers which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (7) injecting a Location HTTP response header or (8) specifying the content of a Location HTTP response header.


Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro and possibly Almond Affiliate Network Classifieds allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter in a browse action to index.php or (2) the addr parameter to gmap.php. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3 a module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the addition of the theme_vcard function to a theme and the use of default content.


Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php the id parameter to (2) news_read.php or (3) lessons_login.php or (4) the cur parameter in a start action to lessons_login.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

Web

Administrator

in

Websense

Personal

Email

Manager

before

Hotfix

and

Email

Security

before

Hotfix

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

FileName

IsolatedMessageID

ServerName

Dictionary

Scoring

and

MessagePart

parameters

to

the

Queue

FileName

IsolatedMessageID

and

ServerName

parameters

to

actions/msgForwardToRiskFilter.asp

and

viewHeaders.asp

in

web/msgList/viewmsg/;

and

the

subject

in

an

e-mail

message

that

is

held

in

a

Queue.


Cross-site scripting (XSS) vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to (1) the pinghost program reachable through the diagnose program; or (2) the traceroute program reachable through the diagnose program; or (3) the probe-limit parameter to the configuration program; the (4) wizard-ids or (5) pager-new-identifier parameter in a firewall-filters action to the configuration program; (6) the cos-physical-interface-name parameter in a cos-physical-interfaces-edit action to the configuration program; the (7) wizard-args or (8) wizard-ids parameter in an snmp action to the configuration program; the (9) username or (10) fullname parameter in a users action to the configuration program; or the (11) certname or (12) certbody parameter in a local-cert (aka https) action to the configuration program.


Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject arbitrary web script or HTML via the action parameter to phprint.php. NOTE: the query_string vector is already covered by CVE-2008-3101.3.


Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php.


Cross-site scripting (XSS) vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response related to an \HTML Injection issue.\


Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier 4.1.x before 4.1.13 4.2.x before 4.2.10 and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6 a module for Drupal allows remote authenticated users with \administer site configuration\ permission to inject arbitrary web script or HTML via unspecified vectors related to link path output.


Cross-site scripting (XSS) vulnerability in viewvc.py in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the view parameter. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php and (2) modules\\base\\myaccount.php; and the PATH_INFO to (3) modules_view.php (4) tabledefs_options.php and (5) adminsettings.php in phpbms\\modules\\base\\.


Multiple cross-site scripting (XSS) vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to user_addfood.php info parameter to (2) user_forgot_pwd_form.php and (3) user_login.php and (4) return parameter to user_login.php.


Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the DCN Description field in the Accounts Receivables menu item for Add Transaction (2) the Description field in the Accounts Payable menu item for Add Transaction or the name field in (3) the Customers menu item for Add Customer or (4) the Vendor menu item for Add Vendor.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

OpenDocMan

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

parameter

to

add.php

toBePublished.php

index.php

and

admin.php;

the

to

the

default

URI

to

category.php

department.php

profile.php

rejects.php

search.php

toBePublished.php

user.php

and

and

the

caller

parameter

in

a

Modify

User

action

to

user.php.


Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via (1) the JEXEC_OUTID parameter in a JEXEC_MODE_RELAY_OUTPUT action to the jexec program; the (2) act (3) refresh-time or (4) ifid parameter to scripter.php; (5) the revision parameter in a rollback action to the configuration program; the m parameter to the (6) monitor (7) manage (8) events (9) configuration or (10) alarms program; (11) the m parameter to the default URI; (12) the m parameter in a browse action to the default URI; (13) the wizard-next parameter in an https action to the configuration program; or the (14) Contact Information (15) System Description (16) Local Engine ID (17) System Location or (18) System Name Override SNMP parameter related to the configuration program.


Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place related to the Library template.


Google Chrome 1.0.154.48 and earlier 2.0.172.28 2.0.172.37 and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: the JavaScript executes outside of the context of the HTTP site.


Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed related to the rendering of the application/rss+xml content type as XML \active content.\


QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI (2) entering a javascript: URI when specifying the content of a Refresh header (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header.


Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22 and 8.0(4)28 and earlier 8.0 versions when clientless mode is enabled allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header.


Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags as demonstrated using (1) email (2) img and (3) url tags.


Cross-site scripting (XSS) vulnerability in the Print (aka Printer e-mail and PDF versions) module 5.x before 5.x-4.7 and 6.x before 6.x-1.7 a module for Drupal allows remote attackers to inject arbitrary web script or HTML by modifying a document head before the Content-Type META element to contain crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7 a related issue to CVE-2009-1575.


CRLF injection vulnerability in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject HTTP headers and bypass the Same Origin Policy via a crafted HTML document related to cross-site scripting (XSS) attacks that depend on communication with arbitrary web sites on the same server through use of XMLHttpRequest without a Host header.


Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter related to the key property and the position of quote and colon characters.


Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via (1) the User.lang parameter to the login page (aka gw/webacc) (2) style expressions in a message that contains an HTML file or (3) vectors associated with incorrect protection mechanisms against scripting as demonstrated using whitespace between JavaScript event names and values.


functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages which allows remote attackers to spoof the user interface and conduct cross-site scripting (XSS) and phishing attacks via a crafted message.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper handling of Location and History objects.


Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie.


Cross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter to header.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4) 8.1.2 and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN'process' to the name of a crafted function aka Bug ID CSCsy80694.


Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form). NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).


Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2 as used in Sun GlassFish Enterprise Server and other products allows remote attackers to inject arbitrary web script or HTML via a UTF-7 string in the PATH_INFO which is displayed on the 404 error page as demonstrated by the PATH_INFO to theme/META-INF.


Multiple cross-site scripting (XSS) vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/applications.php (2) admin/appsgroup.php (3) admin/users.php (4) admin/usersgroup.php and (5) admin/tasks.php; (6) show parameter to admin/logs.php; and (7) mode parameter to admin/configuration-partial.php. NOTE: some of these details are obtained from third party information.


The jar: URI implementation in Mozilla Firefox before 3.0.9 Thunderbird and SeaMonkey does not follow the Content-Disposition header of the inner URI which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a \Content-Disposition: attachment\ designation.


Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via (1) the fmt-out parameter to login.wcap or (2) the date parameter to command.shtml.


Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer as used in Symantec AntiVirus (SAV) before 10.1 MR8 Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1 Norton 360 1.0 and Norton Internet Security 2005 through 2008 allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message related to \two parsing errors.\


Armorlogic Profense Web Application Firewall before 2.2.22 and 2.4.x before 2.4.4 does not properly implement the \positive model \ which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline) as demonstrated by a %0A in a cross-site scripting (XSS) attack URL.


Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Flex before 3.4 when the installed Flash version is older than a specified requiredMajorVersion value allows remote attackers to inject arbitrary web script or HTML via the query string.


Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the \Printer e-mail and PDF versions\ module 5.x before 5.x-4.4 and 6.x before 6.x-1.4 a module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail.


Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the login_username vector for Forms/login1 is already covered by CVE-2009-4406.


Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI to (1) tiki-galleries.php (2) tiki-list_file_gallery.php (3) tiki-listpages.php and (4) tiki-orphan_pages.php.


Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message related to the email view and incorrect HTML filtering in the cleanHTML function in server/inc/tools.php; or the (2) title (3) link or (4) description element in an RSS feed related to the getHTML function in server/inc/rss/item.php.


Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related to package file errors in the upload_form function different vectors than CVE-2009-0260.


Cross-site scripting (XSS) vulnerability in the Quiz module 5.x 6.x-2.x before 6.x-2.2 and 6.x-3.x before 6.x-3.0 a module for Drupal allows remote authenticated users with create quizzes or quiz questions access to inject arbitrary web script or HTML via unspecified vectors.


Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11 as used in vbDrupal before 5.17.0 allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag which are treated as UTF-7 by Internet Explorer 6 and 7.


Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7 which are not properly handled in the \HTML exports of books\ feature; and (2) allow remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via the help text of an arbitrary vocabulary. NOTE: vector 1 exists because of an incomplete fix for CVE-2009-1575.


Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2 as used on iPhone OS before 3.1 iPhone OS before 3.1.1 for iPod touch and other platforms allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.


Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML and read local files via vectors related to script execution with incorrect privileges.


WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4) 8.1.2 and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting and conduct cross-site scripting (XSS) attacks by modifying the first hex-encoded character in a /+CSCO+ URI aka Bug ID CSCsy80705.


Cross-site scripting (XSS) vulnerability in Website\\admin\\Sales\\paypalipn.aspx in DotNetNuke (DNN) before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \name/value pairs\ and \paypal IPN functionality.\


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via an event handler that triggers script execution in the context of the next loaded document.


Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1 and other 2.4.x 2.5.x and pre-release 2.6.x versions allow remote attackers to inject arbitrary web script or HTML via the (1) display parameter to reports.php the (2) order and (3) extdisplay parameters to config.php and the (4) sort parameter to recordings/index.php. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the slab parameter in an edit action (2) the catname parameter in a showcats action and (3) the cat parameter in a reordercat action.


The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system which allows user-assisted attackers to bypass intended access restrictions via LiveConnect aka CR 6724331. NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to determining a security context through an approach that is not the \HTML 5 standard method.\


Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTML via (1) the Page parameter in a List action to modules/ereignis.php (2) the Kontext parameter in a Search action to modules/kategorie.php (3) the image parameter to modules/image.php or (4) the ID parameter in a Detail action to modules/sitzung.php.


Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration which is not properly handled when the administrator accesses the Users menu.


Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9 Thunderbird and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets as exploited in the wild by a March 2009 eBay listing.


Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year parameter to modules/kalender.php (2) the Page parameter in a List action to modules/ereignis.php (3) the Kontext parameter in a Search action to modules/kategorie.php or (4) the image parameter to modules/image.php.


Multiple cross-site scripting (XSS) vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter to groups_profile.php (2) cat_id and (3) razd_id parameters to adv_cat.php and the (4) URL to blogs_full.php.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to insufficient access control for standard JavaScript prototypes in other domains.


Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an established researcher that this is cross-site scripting (XSS) via the search_p_groups parameter in search/query/search.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving submission of a form to the about:blank URL leading to security-context replacement.


Multiple cross-site scripting (XSS) vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) gridPage and (2) gridSort parameters. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page transition.


Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the abperson_displayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Address Book component or (2) the temporaryCalendars parameter to uwc/base/UWCMain.


Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter.


Apache Tiles 2.1 before 2.1.2 as used in Apache Struts and other products evaluates Expression Language (EL) expressions twice in certain circumstances which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Adobe

ColdFusion

Server

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

startRow

parameter

to

or

the

query

string

to

or

administrator/enter.cfm.


Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitrary web script or HTML via the (1) search form; (2) _expresion_de_busqueda (3) letra (4) estado_id and (5) tema parameters to index.php; the (6) PATH_INFO to index.php; (7) unspecified parameters when editing a term as specified by the edit_id and tema parameters to index.php; and the (7) y (8) ord and (9) m parameters to sobre.php.


Mozilla Firefox before 3.0.9 Thunderbird and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest involving a mismatch for a document's principal and (2) XPCNativeWrapper.toString involving an incorrect __proto__ scope which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.


Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via javascript: URIs in the (1) request and (2) return_link_url parameters.


Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name (2) Asset No. and (3) Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter including the BladeCenter H with BPET36H 54 allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager.


Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the next_file parameter to (1) main.cgi (2) img/main.cgi or (3) adm/file.cgi; or (4) the this_file parameter to adm/file.cgi.


Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) com_admin component (2) com_search component when \Gather Search Statistics\ is enabled and (3) the category view in the com_content component.


Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML and read local files via vectors related to the improper escaping of HTML attributes.


Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2 a module for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module.


Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML by overwriting the document.implementation property of (1) an embedded document or (2) a parent document.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

Admin

Console

in

Sun

GlassFish

Enterprise

Server

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

query

string

to

applications/applications.jsf

configuration/configuration.jsf

customMBeans/customMBeans.jsf

resourceNode/resources.jsf

sysnet/registration.jsf

or

webService/webServicesGeneral.jsf;

or

the

name

parameter

to

configuration/auditModuleEdit.jsf

configuration/httpListenerEdit.jsf

or

resourceNode/jdbcResourceEdit.jsf.


Armorlogic Profense Web Application Firewall before 2.2.22 and 2.4.x before 2.4.4 does not properly implement the \negative model \ which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.


Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 \no database\ (aka flat) and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the (1) commentname (aka Author) (2) commentemail (aka Email) and (3) commentmessage (aka Comment) parameters. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers to inject arbitrary web script or HTML via (1) the siteloc parameter in a displayaddsite action the site parameter in a (2) generalproperties or (3) clusterserviceproperties action (4) the adminurl parameter in a global action or (5) the print-list parameter.


Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file as demonstrated by a filename inside a (1) rar or (2) zip archive file.


Cross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in password.php in Scripts For Sites (SFS) EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username parameter to (d) user-properties.jsp; (4) logDir (5) maxTotalSize (6) maxFileSize (7) maxDays and (8) logTimeout parameters to (e) audit-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_roomdesc parameters to (g) muc-room-edit-form.jsp. NOTE: this can be leveraged for arbitrary code execution by using XSS to upload a malicious plugin.


Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9 4.1.0 through 4.1.7 and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module.


Cross-site

scripting

(XSS)

vulnerability

in

the

theme_views_bulk_operations_confirmation

function

in

in

Views

Bulk

Operations

before

and

before

a

module

for

Drupal

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

unspecified

vectors

related

to

node

titles.

NOTE:

some

of

these

details

are

obtained

from

third

party

information.


Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result aka \Script Execution in Windows Search Vulnerability.\


Cross-site scripting (XSS) vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 a module for Drupal allows remote authenticated users with \administer site configuration\ permissions to inject arbitrary web script or HTML via the Password page info field which is not properly handled by the protected_node_enterpassword function in protected_node.module.


Cross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows remote attackers to inject arbitrary web script or HTML via the country parameter which is not properly handled in (1) administrator/manage.php or (2) administrator/trash.php. NOTE: some of these details are obtained from third party information.


The server for 53KF Web IM 2009 Home Professional and Enterprise editions relies on client-side protection mechanisms against cross-site scripting (XSS) which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message related to the msg variable.


Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12 1.12 before 1.12.4 and 1.13 before 1.13.4 when the installer is in active use allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web script or HTML via the charm parameter to (1) index.php and (2) kipper.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x 7.0 7.01 7.02x 7.03 7.03HP1a and 8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) User.id and (2) Library.queryText parameters to gw/webacc and other vectors involving (3) HTML e-mail and (4) HTML attachments.


Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x 4.0 before 4.0.12 4.1 before 4.1.10 4.2 before 4.2.6 and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Magento

and

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

username

field

in

an

admin/

request

to

index.php

possibly

related

to

the

loginusername

parameter

and

the

login

function;

the

email

address

field

in

an

admin/index/forgotpassword/

request

to

index.php

possibly

related

to

the

email

parameter

and

the

forgotpasswordAction

function;

or

the

return

parameter

to

the

default

URI

under

downloader/.


Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks via vectors involving a chrome XBL method and the window.eval function.


Cross-site

scripting

(XSS)

vulnerability

in

the

tag

cloud

search

script

(horde/services/portal/cloud_search.php)

in

Horde

before

and

and

Horde

Groupware

before

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

unspecified

vectors.


Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name (2) ip (3) username or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.


Cross-site scripting (XSS) vulnerability in the \Customize Statistics Page\ (admin/statistics/ConfigureStatistics) in the MDS Connection Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the (1) customDate (2) interval (3) lastCustomInterval (4) lastIntervalLength (5) nextCustomInterval (6) nextIntervalLength (7) action (8) delIntervalIndex (9) addStatIndex (10) delStatIndex and (11) referenceTime parameters.


Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3 as used in Moodle 1.6 before 1.6.9 1.7 before 1.7.7 1.8 before 1.8.8 and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via an HTML block which is not properly handled when the \Login as\ feature is used to visit a MyMoodle or Blog page.