Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Open

Webmail

(OWM)

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

searchtype

longpage

and

page

parameters

to

(a)

openwebmail-main.pl;

the

userfirsttime

page

sort

folder

and

parameters

to

(b)

openwebmail-prefs.pl;

the

msgdatetype

keyword

searchtype

folder

page

and

sort

parameters

to

(c)

openwebmail-send.pl;

the

folder

page

and

sort

parameters

to

(d)

openwebmail-folder.pl;

the

searchtype

page

filesort

singlepage

showhidden

showthumbnail

and

parameters

to

(e)

openwebmail-webdisk.pl;

the

folder

parameter

to

(f)

openwebmail-advsearch.pl;

and

the

abookcollapse

abooksearchtype

abooksort

abooklongpage

abookpage

searchtype

msgdatetype

sort

page

rootxowmuid

and

listviewmode

parameters

to

(g)

openwebmail-abook.pl

different

vectors

than

and


Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6 when the charset on a server-generated page is not defined allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) path and (2) download parameters.


Apple Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10 allows remote attackers to conduct cross-site scripting (XSS) attacks by causing JavaScript events to be associated with the wrong frame.


Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in (a) merchants/index.php including the (1) id or (2) msg parameter in a programedit action; the (3) pgmid parameter in an uploadProducts action; the (4) d (5) m or (6) y parameter in a daily action; the (7) err parameter in a ProgramReport action; the (8) i (9) txtto (10) txtfrom or (11) programs parameter in a LinkReport action; or the (12) msg parameter in an add_money action; and one vector in (b) merchants/temp.php using (13) the rowid parameter. NOTE: vector 7 might overlap CVE-2005-3795.1.


Multiple cross-site scripting (XSS) vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) langadminseite (2) langueberschrift or (3) einstmetachar parameter different vectors than CVE-2007-4711.


Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content Construction Kit (CCK) before 4.7.x-1.6 and 5.x before 5.x-1.6 allow remote attackers to inject arbitrary web script or HTML via nodereference fields when using (1) the plain formatter or (2) the autocomplete text field widget without Views.module.


wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a does not properly verify the unfiltered_html privilege which allows remote attackers to conduct cross-site scripting (XSS) attacks via modified data to (1) post.php or (2) page.php with a no_filter field.


Cross-site scripting (XSS) vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) projectIssueId parameter in EditProjectIssue.do the (2) projectId parameter in ProjectSelected.do the (3) folderId parameter in ProjectDocuments.do and the (4) sortField parameter in ProjectIssues.do.


Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter as demonstrated by a URL within a url field in a STYLE element possibly due to an incomplete fix for CVE-2004-2103.2.


Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary web script or HTML in the local zone via a URI when the document at the associated URL is saved to a local file which then contains the URI string along with the document's original content.


Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) Success Template (STPL) and (2) Failure Template (FTPL) parameters which are not properly handled in an error message.


Multiple cross-site scripting (XSS) vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web script or HTML via (1) a student's email address (2) the year parameter to genbrws/Student/cal_month.php3 and other unspecified vectors related to the calendar. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so then this issue should not be included in CVE.


Cross-site scripting (XSS) vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to inject arbitrary web script or HTML via unknown vectors as demonstrated by a SCRIPT element in an unspecified context when saving a document. NOTE: because the details of the attack are uncertain it is unclear whether this crosses privilege boundaries.


Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to inc/lib/screen.php or (2) the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly related to the setting of option.nopage.create in tuigwaa.properties.


Cross-site scripting (XSS) vulnerability in ips_kernel/class_ajax.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to inject arbitrary web script or HTML into user profile fields via unspecified vectors related to character sets other than iso-8859-1 or utf-8.


Cross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3-0-1 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) q parameter to (a) admin/membersearch.php or (3) the userid parameter to (b) admin/edituser.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Headstart

Solutions

DeskPRO

allow

remote

authenticated

users

to

inject

arbitrary

web

script

or

HTML

via

unspecified

parameters

to

techs.php

and

in

(a)

admincp/

and

(b)

possibly

a

directory

on

the

\User

side.\


Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b 4.1 before 4.1(3)sr5 4.2 before 4.2(3)sr2 and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page aka CSCsi10728.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

eGroupWare

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

parameter

to

and


Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings as demonstrated by the conf_SMTP_MailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizard_main_first.shtml. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.


Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1 and 5.x before 5.2.2.5 allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists.


Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component or (3) multiple unspecified fields in New Menu Item.


Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) box_width (2) PEDIGREE_GENERATIONS and (3) rootid parameters in ancestry.php and the (4) newpid parameter in timeline.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the (1) subject_t and (2) body_text parameters. NOTE: vector 2 requires bypassing a client-side security mechanism that attempts to block XSS sequences.


Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10 as used by certain Cosminexus products allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.


Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS) possibly 2.6 and earlier when using CiscoWorks Common Services 3.0.x and 3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories as demonstrated by (1) ActiveKB/ and (2) default/categories/ActiveKB/.


Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1 and possibly 4.1.2 allows remote attackers to inject arbitrary web script or HTML via certain input available in PHP_SELF in (1) redirect.php possibly related to (2) login.php different vectors than CVE-2007-2865.


Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918 but there are insufficient details to be sure.


The core Upload module in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 places the .html extension on a whitelist which allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading .html files.


Cross-site scripting (XSS) vulnerability in default.asp in CREApark GOLD KOY PORTALI allows remote attackers to inject arbitrary web script or HTML via the aranan parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the (1) search function (2) advanced search function and possibly other components.


Multiple cross-site scripting (XSS) vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) NA_DISPLAYNAME parameter in helpdesk/user/rf_create.jsp and the (2) username and (3) LDAPError parameters in index2.jsp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in picture.php in PhpWebGallery 1.7.0 when Comments for all is enabled allows remote attackers to inject arbitrary web script or HTML via the author parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors as demonstrated by the (1) uname and (2) pass parameters in a login form and (3) an unspecified \url value \ leading to storage of XSS sequences in the database and display of these sequences in the alert section of the admin panel.


Multiple cross-site scripting (XSS) vulnerabilities in Layton HelpBox 3.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Forename (2) Surname (3) Telephone and (4) Fax fields to writeenduserenduser.asp; the (5) Filter field to statsrequestypereport.asp; and the (6) sys_request_id parameter to requestattach.asp; and allow remote authenticated users to inject arbitrary web script or HTML via the (7) Asset (8) Location and (9) Problem fields to editrequestenduser.asp; the (10) Asset (11) Asset Location (12) Problem Desc and (13) Solution Desc fields to editrequestuser.asp; and the (14) End User and (15) Description fields to usersearchrequests.asp. NOTE: vectors 5 and 6 do not require authentication to exploit.


Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) repertimage parameter to utilisateurs/vousetesbannis.php the (2) elseifvotetxtresultatduvote parameter to utilisateurs/votesresultats.php and the (3) elseifforumtxtmenugeneraleduforum parameter to moduleajouter/depot/adminforum.php.


Cross-site scripting (XSS) vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary web script or HTML via the clave parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt which is not properly handled when the Monitor Web Syslog screen is open.


Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64 WebMail Lite ASP before 4.0.11 and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to login.php and the (2) mode2 parameter to default.asp in an advanced_login mode.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) u (2) p (3) c and (4) s parameters and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via (1) the email parameter to index.php; or the command parameter to index.php in (2) the default action for the home page (3) a currencies action or (4) a basket action.


Cross-site scripting (XSS) vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in mail.asp in Netkamp Emlak Scripti allows remote attackers to inject arbitrary web script or HTML via the (1) Email parameter and possibly the (2) Ad (3) Soyad (4) Konu and (5) Mesaj parameters to iletisim.asp.


Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the (1) group and (2) members parameters in (a) NewGroup.jsp; the (3) edittime parameter in (b) Edit.jsp; the (4) edittime (5) author and (6) link parameters in (c) Comment.jsp; the (7) loginname (8) wikiname (9) fullname and (10) email parameters in (d) UserPreferences.jsp and (e) Login.jsp; the (11) r1 and (12) r2 parameters in (f) Diff.jsp; and the (13) changenote parameter in (g) PageInfo.jsp.


Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter a different vector than CVE-2005-2204.


Cross-site scripting (XSS) vulnerability in Cisco IOS allows remote attackers to inject arbitrary web script or HTML and execute IOS commands via unspecified vectors aka PSIRT-2022590358. NOTE: as of 20071016 the only disclosure is a vague pre-advisory with no actionable information. However since it is from a well-known researcher it is being assigned a CVE identifier for tracking purposes.


Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) account.php (2) moresmiles.php or (3) recover.php; or (4) the \to\ parameter to usercp.php.


Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4 1.6.4.2 and possibly other versions allows remote attackers to conduct cross-site scripting (XSS) attacks and inject arbitrary web script or HTML via XSS sequences without SCRIPT tags in the description parameter to (1) tcreate.php or (2) tupdate.php as demonstrated using an onmouseover event in a b tag.


Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5 and 5.x before 5.x-1.9 for Drupal; as used by the ASIN Field e-Commerce Fullname field for CCK Invite Node Relativity Pathauto PayPal Node and Ubercart modules; allow remote authenticated users with a post comments privilege to inject arbitrary web script or HTML via unspecified vectors related to (1) comments (2) vocabulary names (3) term names and (4) usernames.


Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to the password reminder page (tiki-remind_password.php) (2) IMG tags in wiki pages and (3) the local_php parameter to db/tiki-db.php.


Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags when BBcode is disabled; or the (2) user (3) email or (4) Real Name fields in a profile.


Cross-site

scripting

(XSS)

vulnerability

in

in

ILIAS

and

earlier

allows

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

attributes

inside

a

domain-name

string

in

the

mailing

or

forum

component

as

demonstrated

using

the

style

and

onmouseover

HTML

attributes.


Cross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue tracking module before 4.7.x-1.5 4.7.x-2.x before 4.7.x-2.5 and 5.x-1.x before 5.x-1.1 for Drupal allows remote authenticated users with project create or edit permissions to inject arbitrary web script or HTML via unspecified vectors involving a (1) individual or (2) overview form.


Multiple cross-site scripting (XSS) vulnerabilities in dblisttest.asp in dbList 8.1 allow remote attackers to inject arbitrary web script or HTML via the (1) db (2) pagesize (3) sort (4) strKeyWords and (5) table parameters. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body as demonstrated by the onload attribute in a BODY element.


Multiple cross-site scripting (XSS) vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager 7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) requestid (2) fileid (3) woMode and (2) woID parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in (1) PHP_SELF in (a) server_status.php and (b) grab_globals.lib.php (c) display_change_password.lib.php and (d) common.lib.php in libraries/; and certain input available in PHP_SELF and (2) PATH_INFO in libraries/common.inc.php. NOTE: there might also be other vectors related to (3) REQUEST_URI.


Multiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14 and 3.6.1 before patch 5 when scope accounts are enabled allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in admin/logon.asp in ShoppingTree CandyPress Store 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter a different vector than CVE-2007-2804. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with (1) the title parameter or (2) a \title=\ sequence in the PATH_INFO or a request to the download module with (3) the cat parameter or (4) a \cat=\ sequence in the PATH_INFO.


Cross-site scripting (XSS) vulnerability in swamp/action/LoginActions (aka the login box) in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter to php-bin/Webclient.php or (2) the Langue parameter to the default URI.


Multiple cross-site scripting (XSS) vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web script or HTML via the (1) ad (2) sehir (3) yas (4) cins (5) tel (6) mail and (7) mesaj parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type and considers HTML documents within a jar archive to have the same origin as the inner URL which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.


Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0 when UTF-7 document content is rendered directly in UTF-7 allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses single quote characters to delimit a literal string within an XSS sequence a related issue to CVE-2007-5415.


Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4 2.0.5 and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php the (2) theme_c parameter to help/index.php or the (3) INSTALL_X7CHATVERSION parameter to upgradev1.php.


Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to integrator.php; (2) the token parameter in a New Password action (3) the nid_acl parameter in a Folder Properties action or (4) the uid parameter in a Modify User action to command.php; or (5) the target parameter to index.php different vectors than CVE-2006-3320.


dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del (2) delbackup (3) res or (4) ren action. NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks.


Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to the default URI associated with a directory as demonstrated by (a) the root directory and (b) the view/ directory; (2) parameters associated with saved settings as demonstrated by (c) the conf_Network_HostName parameter on the Network page and (d) the conf_Layout_OwnTitle parameter to ServerManager.srv; and (3) the query string to ServerManager.srv which is displayed on the logs page. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.


Cross-site scripting (XSS) vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request a different vulnerability than CVE-2006-6942.


WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1 iPhone 1.0 through 1.1.2 and iPod touch 1.1 through 1.1.2 allows remote attackers to \navigate the subframes of any other page \ which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.


Cross-site scripting (XSS) vulnerability in Mozilla Firefox 2.0 when UTF-7 document content is rendered directly in UTF-7 allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses '/' (slash) characters to delimit a literal string within an XSS sequence a related issue to CVE-2007-5414.


Cross-site scripting (XSS) vulnerability in admin/index.php in Helios Calendar 1.2.1 Beta allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1 when register_globals is enabled allow remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to certain user_style.php files under themes/ as demonstrated by the user_colorsbg_color parameter.


Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web script or HTML via (1) the l_username parameter to the default URI under admin/ or (2) the l_emoticonlist parameter to admin/emoticonlist.php.


Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the f_email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to inject arbitrary web script or HTML via the (1) keyField (2) nameField (3) valueField and (4) frameReturn parameters.


Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11 B.11.23 and B.11.31 and SMH before 2.1.10 for Linux and Windows allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.


Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string a different vulnerability than CVE-2007-4713. NOTE: this can be leveraged to capture login credentials in some browsers that support remembered (auto-completed) passwords.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action related to the savesearch JavaScript function; and (2) the details parameter in a details action related to the History tab and the getHistory JavaScript function.


Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express allow remote attackers to inject arbitrary web script or HTML via the (1) \assess modification \ (2) user-id and other unspecified fields to the /tpmx URI; or (3) involving unspecified vectors related to \error processing.\


Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attackers to inject arbitrary web script or HTML which is not properly handled when generating error messages as demonstrated by input originally sent in the URI to secure/CreateIssue. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) c and (2) h parameters to (a) web/host_gmetrics.php; the (3) G (4) me (5) x (6) n (7) v (8) l (9) vl and (10) st parameters to (b) web/graph.php; and the (11) c (12) G (13) h (14) r (15) m (16) s (17) cr (18) hc (19) sh (20) p (21) t (22) jr (23) js (24) gw (25) z and (26) gs parameters to (c) web/get_context.php. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the directory parameter. NOTE: this issue was originally reported for toonchapter8.php but this is probably a site-specific name since the PHPSlideShow distribution does not contain that file.


Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2 when logins are authenticated with the cookie auth_type allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php a different vulnerability than CVE-2005-0992.


Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter. NOTE: this issue reportedly exists because of a regression that followed a fix at an unspecified earlier date.


Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to (1) index.php and possibly (2) admin/index.php and (3) the topic parameter to modules/feed/feed.php (aka modules/feed.php).


Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus possibly 1.5 or 1.52 allow remote attackers to inject arbitrary web script or HTML via (1) the cat_name parameter to faq.php; and unspecified parameters to the (2) add categories (3) edit categories (4) delete categories (5) add faq (6) edit faq and (7) delete faq Admin scripts.


Cross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1 when pre-logon sequences are enabled allow remote attackers to inject arbitrary web script or HTML via the query string to (1) my.activation.php3 and (2) my.logon.php3.


Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers to inject arbitrary web script or HTML via (1) a SWF file that uses the asfunction: protocol or (2) the navigateToURL function when used with the Flash Player ActiveX Control in Internet Explorer.


Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file related to \pre-generated SWF files\ and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by CVE-2007-6244.1.


Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Controller 2.5.4.18 and earlier and 2.4.8.6-FIPS and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the /screens URI related to the url variable.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the galleryID parameter in a usergallery upload action; or the (2) upID (3) tag (4) month (5) userID or (6) year parameter in a calendar announce action.


Multiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) contentshort or (2) contentfull parameter in an addnews action to the default URI; (3) the content parameter in a pm write action to 2z/admin.php; (4) the referer parameter to templates/default/usermenu.tpl accessed through index.php; or the (5) newavatar or (6) newphoto parameter in a profile action to the default URI under 2z/.


Multiple cross-site scripting (XSS) vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI which is later displayed by (1) log.php or (2) logerror.php a different vulnerability than CVE-2007-6459.


Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gb_mail (2) gb_name and (3) gb_text parameters in a guestbook action to index.php and unspecified other vectors.


Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comment (commento) field different vectors than CVE-2007-2357.


Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a \413 Request Entity Too Large\ error message which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests as demonstrated via an HTTP request containing an invalid Content-length value a similar issue to CVE-2006-3918.


Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search action. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) show parameter to index.php and the (2) print parameter to print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action a different vector than CVE-2007-6055. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary web script or HTML via the (1) title (2) intro and (3) question parameters and (4) unspecified answer parameters in a create_new action. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) the subject parameter to modules/news/submit.php; (2) the PATH_INFO to modules/news/index.php possibly related to the XoopsPageNav class; or (3) an avatar image to edituser.php.


Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the origin parameter to work/work.php in a display_upload_form action or the forum parameter to (2) forum/viewforum.php or (3) forum/viewthread.php.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) func or (2) date parameter or the jid parameter in a (3) log or (4) user action a different vulnerability than CVE-2007-3910.


Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors aka BugID 6566309.


Multiple cross-site scripting (XSS) vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in a viewtopic action or the (2) newsyear or (3) newsmonth parameter in a newsarchive action to the default URI in patch/.


Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to (1) xml/index.php; or (2) the year parameter to view.page.inc.php which is reachable through a view action to the top-level index.php.


Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php (3) the name parameter to admin/theme_del_confirm.php or (4) the themeName parameter to admin/theme_preview.php.


Cross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to inject arbitrary web script or HTML via the month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the day and year vectors are covered by CVE-2007-6274.


The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 does not update the origin domain when retrieving the inner URL parameter yields an HTTP redirect which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI a different vulnerability than CVE-2007-5947.


Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or HTML via crafted filenames to the (1) Core or (2) add-item modules; or via (3) HTTP PROPPATCH in the WebDAV module.


Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6 2.0.35 through 2.0.61 and 1.3.2 through 1.3.39 when the server-status page is enabled allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href (4) shape or (5) coords attribute of a chart area.


Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2 as used in Apache Struts and other products allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.html in src/io/.


Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1 and possibly other versions before 1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the return parameter to user/remindPassword (2) the q parameter to the category script (3) the return parameter to the order script or (4) the email parameter to user/remindComplete.


Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via the (1) LIMIT parameter to chat/deluser.php3 the (2) Link parameter to chat/edituser.php3 or the (3) LastCheck or (4) B parameter to chat/users_popupL.php3. NOTE: the FontName vectors for start_page.css.php3 and style.css.php3 are already covered by CVE-2005-1619. The medium vectors for start_page.css.php3 (start_page.css.php) and style.css.php3 (style.css.php) and the From vector for users_popupL.php3 (users_popupL.php) are already covered by CVE-2005-3991.


Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request which is activated by administrators viewing log files via the Trace page.


Adobe Flash Player 9.x up to 9.0.48.0 8.x up to 8.0.35.0 and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.


Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors a different issue than CVE-2007-3574.


Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) users/register.php or (2) search/index.php or an editcomments action in (3) wiki/index.php or (4) forums/index.php. NOTE: the error parameter to users/login.php is covered by CVE-2006-3103.


Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) an event description (2) the query string to pref.php and (3) the adv parameter to search.php. NOTE: vector 1 requires user authentication.


Multiple cross-site scripting (XSS) vulnerabilities in shout.php (aka the shoutbox) in LineShout 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username (nickname) or (2) message parameter. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frm_emessage parameter a different vector than CVE-2006-6649. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks by modifying critical variables such as $_SERVER as demonstrated by injecting web script via the _SERVERSCRIPT_NAME parameter.


Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact possibly session fixation via a META HTTP-EQUIV Set-cookie expression in the id parameter related to \cookie manipulation.\ NOTE: this issue might be cross-site scripting (XSS).


Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to inject arbitrary web script or HTML via (1) user-created text fields; the (2) F05003 (3) F05005 and (4) F05015 fields; and other unspecified standard fields.


Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) listmembers.php and (2) stats.php. NOTE: some of these details are obtained from third party information.


CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an unspecified context. NOTE: this can be leveraged for cross-site scripting (XSS) attacks.


Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 through 6.3 when Internet Explorer is used allows remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly a related issue to CVE-2006-5653.


Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to (c) openTutorial.php (d) topFrame.php or (e) admin/editListing.php; or the (3) search parameter to search.php.


Cross-site scripting (XSS) vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Centrinity FirstClass 8.3 and earlier and Server and Internet Services 8.0 and earlier do not properly handle a URL with a null (\%00\) character which allows remote attackers to conduct cross-site scripting (XSS) attacks. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4 and SeaMonkey 1.0.9 and 1.1.2 allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site which is executed in the context of that site.


Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) awards.php (2) login.php (3) register.php (4) weapons.php and possibly other unspecified files.


Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in \every main page \ as demonstrated by default.aspx.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

freePBX

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

From

To

Call-ID

User-Agent

and

unspecified

other

SIP

protocol

fields

which

are

stored

in

and

displayed

by


Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML via the (1) path parameter to view/search/; or the (2) companyname (3) country (4) email (5) firstname (6) middlename (7) required (8) surname or (9) title parameter to view/supplynews/.


Multiple cross-site scripting (XSS) vulnerabilities in the Virtual War (VWar) 1.5.0 R15 and earlier module for PHP-Nuke when register_globals is enabled allow remote attackers to inject arbitrary web script or HTML via the (1) memberlist parameter to extra/login.php and the (2) title parameter to extra/today.php.


Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via (1) module_bbcodeloader.php (2) module_div.php (3) module_email.php (4) module_image.php (5) module_link.php or (6) the editorid parameter to module_table.php in jscripts/folder_rte_files/. NOTE: some details were obtained from third party sources.


CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9 10.4.9 and later and iPhone before 1.0.1 allows remote attackers to inject arbitrary HTTP headers via LF characters in an XMLHttpRequest request which are not filtered when serializing headers via the setRequestHeader function. NOTE: this issue can be leveraged for cross-site scripting (XSS) attacks.


Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (b) magpie_simple.php in external/magpierss/scripts/ the (2) rss_url parameter to (c) magpie_slashbox.php in external/magpierss/scripts/ and the (3) body parameter to the (d) weblogmodule (aka Weblog Comments) module.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Dokeos

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

img

parameter

to

and

other

unspecified

vectors.


Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3 4.1 before 4.1(3)sr5 4.2 before 4.2(3)sr2 and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-* and before 4.7.x-1.2 in the 4.7.x-1.* series for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors relating to (1) direct display of data from the database and (2) other portions of the user interface.


Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that includes a windows.setTimeout function that is activated after the user has moved from the current page.


Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks via the SERVER superglobal array. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) to (1) sendmail.php or (2) order_form.php different vectors than CVE-2006-6734.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

beta

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

formmail

parameter

to

the

formmods

or

parameter

to

the

id

parameter

to

the

formcat

parameter

to

the

formcat

formname

or

formmessage

parameter

to

certain

news/details/id_*/action_create/index.php

files;

or

the

formmail

parameter

to


Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Referer HTTP header to misc.php or the (2) category name when deleting a category in admin_categories.php.


Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via (1) the edit_plugin parameter to configure_plugin.tpl.php or (2) certain array parameters to web/phpinfo.php as demonstrated by 1 or a.


Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue but the proper identifier for the ipsec-tools issue is CVE-2007-1841.


Cross-site scripting (XSS) vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php. NOTE: certain parameter values also trigger path disclosure.


Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier and VB150 with firmware 1.1 R39 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6 4.1.0 through 4.1.36 5.0.0 through 5.0.30 5.5.0 through 5.5.24 and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload and other unspecified vectors.


Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1 when register_globals is enabled allow remote attackers to inject arbitrary web script or HTML via the (1) err and (2) warn parameters. NOTE: the vendor disputes the significance of the issue stating that \eTicket is not designed to work with register_globals On.\


Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News Management Online (aka phpwebnews) 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the m_txt parameter to (1) iklan.php (2) index.php or (3) bukutamu.php.


Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.


Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2 6.6.0.107 and 6.6.2.2 possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp (b) de/create_account.asp and other files.


Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the ARLogin parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6 4.1.0 through 4.1.36 5.0.0 through 5.0.30 5.5.0 through 5.5.24 and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character as demonstrated by a URI containing a \snp/snoop.jsp;\ sequence.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

Open-gorotto

edition

edition

and

edition

before

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

unspecified

parameters

to

or

in

pub/modules/ci/;

or

or

in

pub/modules/f/.


Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings module.


Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress when custom 404 pages that call get_sidebar are used allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF) a different vulnerability than CVE-2007-1622.


footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting (XSS) attack or via the pun_include tag as demonstrated by use of admin_options.php to execute PHP code from an uploaded avatar file.


Multiple cross-site scripting (XSS) vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attackers to inject arbitrary web script or HTML via the (1) URL (2) CAT and (3) USER parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the do parameter in an AttachFile action a different vulnerability than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in hlstats.php in HLstats 1.35 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) authusername or (2) authpassword parameter different vectors than CVE-2007-0840 and CVE-2007-2812.


Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search as used in Database Server 9.2.0.8 10.1.0.5 and 10.2.0.2 and in Application Server 9.0.4.3 10.1.2.0.2 and 10.1.2.2.0 allows remote attackers to inject arbitrary HTML or web script via the EXPTYPE parameter aka SES01.


Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the den parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the svalue parameter in a search action. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to (a) chat.php (2) LANGDEFAULT_BRANDING and (3) PHPLIVE_VERSION parameters to (b) help.php the (4) adminname parameter to (c) admin/header.php and the (5) BASE_URL parameter to (d) super/info.php and in some cases the LANGDEFAULT_BRANDING PHPLIVE_VERSION and (6) nav_line parameters to setup/footer.php different vectors than CVE-2006-6769.


Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string which is not sanitized when an HREF attribute is printed by the (1) process_search or (2) show_recent_searches function.


Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields related to generation of error messages.


Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


** DISPUTED ** Cross-site scripting (XSS) vulnerability in search.php in Google Custom Search Engine allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this issue is disputed by the Google Security Team who states that \Google does not provide the 'search.php' script referenced. When a user creates a custom search engine we provide them with a block of javascript to include on their site. Some users write additional code around this block of javascript to further customize their website.\


Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic Standard Enterprise and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the (1) FTVAR_LINKP and (2) FTVAR_URLP parameters to (a) forum/include/error/autherror.cfm and the (3) FTVAR_SCRIPTRUN parameter to (b) forum/include/common/comfinish.cfm and (c) blog/include/common/comfinish.cfm.


Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 11-10-05-BETA-SF1:111005 and earlier allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the avatar parameter. NOTE: this may be related to the tracker program in the Janitor package. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue CVE-2007-3835.


Adobe Integrated Runtime (AIR aka Apollo) allows context-dependent attackers to modify arbitrary files within an executing .air file (compiled AIR application) and perform cross-site scripting (XSS) attacks as demonstrated by an application that modifies an HTML file inside itself via JavaScript that uses an APPEND open operation and the writeUTFBytes function. NOTE: this may be an intended consequence of the AIR permission model; if so then perhaps this issue should not be included in CVE.


inc/vul_check.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sess_id parameter which has unknown impact and remote attack vectors probably cross-site scripting (XSS).


Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1 and 11.x before 11.4.19-R14378 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via an RSS feed. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in default.asp in Dora Emlak 1.0 when the goster parameter is set to iletisim allow remote attackers to inject arbitrary web script or HTML via the (1) Adiniz and (2) Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager Tiered Storage Manager Replication Monitor and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.


Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Adiniz (Ady) (2) Soyadiniz (Soyady) (3) Ehliyet (4) Askerlik and (5) GSM parameters; and possibly other unspecified vectors.


Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an unspecified component related to insufficient sanitization by the xss_clean function.


Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8 and 6.x before 6.0.46.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) a saved Workflow name; (2) a Workflow name related to deletion of a Workflow template; (3) the Content-Type HTTP header; or (4) the name of an uploaded file. NOTE: items 3 and 4 also affect the same version numbers of Xythos Digital Locker (XDL). Some or all vectors might also affect Xythos WebFile Server.


Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the \Secondary Login Page\ as demonstrated using (1) pls/ and (2) pls/MSBEP004/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP Basis component 700 before SP12 and 640 before SP20 allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error page.


Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307 when register_globals is enabled allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) month parameters to calendar.php and the (3) leftfooter parameter to cal_footer.inc.php. NOTE: the ycyear parameter to yearcal.php is already covered by CVE-2006-1835.


Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) module_key parameter to (a) kb/kb.php (b) quiz/runquiz.php (c) quiz/quiz.php (d) forum/forum.php (e) forum/byname.php and (f) journal/journalview.php in modules/ and unspecified other scripts; the (2) tag_key parameter to modules/journal/journalview.php; the (3) user_group_key parameter to (g) users/secureaccounts.php; and (4) the request_uri parameter to (h) login.php.


Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the (1) alpha parameter in (a) netflow/jspui/applicationList.jsp the (2) task parameter in (b) netflow/jspui/appConfig.jsp the (3) view parameter in (c) netflow/jspui/index.jsp and the (4) rtype parameter in (d) netflow/jspui/selectDevice.jsp and (e) netflow/jspui/customReport.jsp. NOTE: it was later reported that vector 3 also affects 7.5 build 7500.


Cross-site scripting (XSS) vulnerability in the LoginToboggan module 5.x-1.x-dev before 20070712 for Drupal allows remote authenticated users with \administer blocks\ permission to inject arbitrary JavaScript and gain privileges via \the message displayed above the default user login block.\


Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Your Name (2) Your Homepage and (3) Your Comment fields when using \Approve Comments.\


Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests as demonstrated using the aliases parameter to an html/add action.


Cross-site scripting (XSS) vulnerability in profile.php in Jasmine CMS 1.0_1 allows remote authenticated users to inject arbitrary web script or HTML via the profile_email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in mesaj_formu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Isim (2) Mesajiniz and (3) E-posta fields. NOTE: these probably correspond to the isim mesaj and posta parameters to save.php.


Cross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI) that accesses index.php. NOTE: this can be leveraged for PHP code execution in an administrative session.


Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to (1) comersus_customerAuthenticateForm.asp or (2) comersus_message.asp different vectors than CVE-2004-0681.


Multiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in a GET request or (2) the Title field of a visitor comment and (3) allow remote authenticated users to inject arbitrary web script or HTML via a message to another user. NOTE: vector (2) might overlap CVE-2006-3571.1.


Multiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the (1) cid (2) message or (3) question parameter. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject arbitrary web script via the autoscroll parameter which is injected into Javascript that is sent to the client.


Cross-site scripting (XSS) vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 010306 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the avatar parameter. NOTE: this may be related to the tracker program in the Janitor package. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have (1) a malformed SGML numeric character reference with a '\\0' (0x00) character in a javascript: URI or (2) an attribute in an element that lacks the '>' character at the end of the start tag a different vulnerability than CVE-2007-0231.


Multiple cross-site scripting (XSS) vulnerabilities in HiddenChest \is ve Bayi Basvuru Formu\ (Yb ve Bayi Babvuru Formu) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATH_INFO (REQUEST_URI) to wp-admin/themes.php a different vulnerability than CVE-2007-1622. NOTE: this might not cross privilege boundaries in some configurations since the Administrator role has the unfiltered_html capability.


Cross-site scripting (XSS) vulnerability in philboard_search.asp in husrevforum 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the (1) c4_trap_ip_ (2) devname (3) snmp_getcomm or (4) snmp_setcomm parameter.


Multiple cross-site scripting (XSS) vulnerabilities in netjukebox 4.01b allow remote attackers to inject arbitrary web script or HTML via the (1) album_id (2) order (3) sort (4) filter and (5) genre_id parameters to (a) index.php; and the (6) url parameter to (b) ridirect.php. NOTE: the attack also reveals the installation path.


Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary web script or HTML via (1) the sUName parameter to UserArea/Authenticate.php (2) the sAccountUnq parameter to UserArea/NewAccounts/index.php or the (3) iCategoryUnq (4) iDBLoc (5) iTtlNumItems (6) iNumPerPage or (7) sSort parameter to G_Display.php different vectors than CVE-2005-4239.


Multiple cross-site scripting (XSS) vulnerabilities in kayit.asp in Gorki Online Santrac Sitesi allow remote attackers to inject arbitrary web script or HTML via the (1) kullanici (2) posta or (3) takim_adi parameter to uyeler.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in 404.php in Domain Technologie Control (DTC) before 0.25.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (REQUEST_URI). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly involving the (1) keyshow (2) sortkey and (3) show parameters to index.php.


Cross-site

scripting

(XSS)

vulnerability

in

in

PHP-Fusion

and

when

guest

posts

are

enabled

allows

remote

authenticated

users

to

inject

arbitrary

web

script

or

HTML

via

the

URI

related

to

the

constant.


Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sbl (2) sbr or (3) search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected but this is incorrect.


Cross-site scripting (XSS) vulnerability in the LoginToboggan module 4.7.x-1.0 4.7.x-1.x-dev and 5.x-1.x-dev before 20070712 for Drupal when configured to display a \Log out\ link allows remote attackers to inject arbitrary web script or HTML via a crafted username. NOTE: Drupal sanitizes the username by removing certain characters so this might not be a vulnerability on default installations.


Cross-site scripting (XSS) vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in searchform.php in the AndyBlue theme before 20070607 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI to index.php. NOTE: this can be leveraged for PHP code execution in an administrative session.


Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script \into another site's context\ via a \timing issue\ involving the (1) addEventListener or (2) setTimeout function probably by setting events that activate after the context has changed.


Mozilla Firefox 2.0.0.5 Thunderbird 2.0.0.5 and before 1.5.0.13 and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment aka \Cross Context Scripting.\ NOTE: this issue is caused by a CVE-2007-3089 regression.


Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameter to showuser; and other vectors involving (2) calendar mode (3) bulletin board mode (4) room names and (5) uploaded file names.


Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search (2) show (3) searchtype (4) catid and (5) searchtxt parameters a different version and vectors than CVE-2005-4060.


Cross-site scripting (XSS) vulnerability in index.php in Site@School (S@S) 2.4.10 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the (1) updateform and (2) displayform parameter to (a) gateway/gateway.exe; the (3) TERMS (4) database (5) srchad (6) SuggestedSearch and (7) searchform parameters to the (b) \Basic Search page\; and (8) username parameter when (c) logging on.


Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C uCosminexus Collaboration Portal up to 06-30-/D and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7 and possibly other 1.0.x versions allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) upgrade-0-2-3.php (2) upgrade-0-3.php or (3) upgrade-0-4.php in install/ a different vulnerability than CVE-2005-4193.


Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting (XSS) attacks when spellchecking UTF-8 encoded messages via the spell_utf8test function in lib/exe/spellcheck.php which triggers HTML document identification and script execution by Internet Explorer even though the Content-Type header is text/plain.


Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in (a) ping.do and (b) traceRoute.do in map/; the (2) reportName (3) displayName and (4) selectedNode parameters to (c) reports/ReportViewAction.do; the (5) operation parameter to (d) admin/ServiceConfiguration.do; and the (6) selectedNode and (7) selectedTab parameters to (e) admin/DeviceAssociation.do. NOTE: the searchTerm parameter in Search.do is already covered by CVE-2006-2343.


Cross-site scripting (XSS) vulnerability in ara.asp in Efendy Blog 1.0 allows remote attackers to inject arbitrary web script or HTML via the ara parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in defter_yaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ad and (2) konu parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04 SP15 through SP19 and Nw04s SP7 through SP11 aka SAP Java Technology Services 640 before SP20 and SAP Web Dynpro Runtime Core Components 700 before SP12 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.


Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the search action possibly related to the term parameter to index.php; or (2) an anonymous blog entry possibly involving the (a) posted_by (b) subject and (c) content parameters to index.php; as demonstrated by the onmouseover attribute of certain elements. NOTE: some of these details are obtained from third party information.


Safari in Apple iPhone 1.1.1 and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10 allows remote attackers to set Javascript window properties for web pages that are in a different domain which can be leveraged to conduct cross-site scripting (XSS) attacks.


The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) errors/rights.asp or (2) errors/transaction.asp or (3) the name of a MIME type (mimetype).


Cross-site scripting (XSS) vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code which is reflected to the user in the resulting error message. NOTE: this can be leveraged for root access via a sequence of steps involving web script that creates a new FTP user account.


Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2 and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177.


Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log; (3) allows context-dependent attackers to inject arbitrary web script or HTML into /var/log/messages via a PHP script that invokes /usr/bin/logger; (4) allows local users to inject arbitrary web script or HTML into /var/log/messages by invoking /usr/bin/logger at the command line; and allows remote attackers to inject arbitrary web script or HTML via remote requests logged in the (5) /var/log/exim/rejectlog (6) /var/log/exim/mainlog (7) /var/log/proftpd/auth.log (8) /var/log/httpd/error_log (9) /var/log/httpd/access_log (10) /var/log/directadmin/error.log and (11) /var/log/directadmin/security.log files.


Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in (1) imp/search.php and (2) ingo/rule.php. NOTE: this issue has been disputed by the vendor noting that the search.php issue was resolved in CVE-2006-4255 and attackers can only use rule.php to inject XSS into their own pages.


Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the file parameter to wp-admin/templates.php and possibly other vectors involving the action variable.


Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via (1) the email Subject header in thread.php (2) the edit_query parameter in search.php or other unspecified parameters in search.php. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to inject arbitrary web script or HTML via unspecified vectors that bypass the client-side protection scheme one of which may be the q parameter to the search program. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module a different product than CVE-2006-3948.


ext/filter in PHP 5.2.0 when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag does not properly strip HTML tags which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML with a '<' character followed by certain whitespace characters which passes one filter but is collapsed into a valid tag as demonstrated using %0b.


Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web script or HTML and possibly gain full access to the system by using an XSS vulnerability in google.com to extract the signature for the internal web server then calling the \under\ parameter in Advanced Search with the proper signature.


Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2 and before 2.1.3 RC2 in the 2.1 series allows remote authenticated users with theme privileges to inject arbitrary web script or HTML via the PATH_INFO in the administration interface related to loose regular expression processing of PHP_SELF.


The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag which allows remote attackers to conduct cross-site scripting (XSS) attacks as demonstrated using the UTF-7 character set.


Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) Gallery Comments pages (2) Feedback pages (3) Search Results pages and (4) the Statistics Log viewer.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

ActiveCalendar

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

css

parameter

to

flatevents.php

js.php

mysqlevents.php

xmlevents.php

or

in

data/.


Multiple cross-site scripting (XSS) vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) login or (2) mail_address field in Register.php or the (3) search_author (4) mode (5) start_year (6) end_year or (7) date_type field in Search.php a different vulnerability than CVE-2006-1674. NOTE: 1.6.2 and other versions might also be affected.


Multiple cross-site scripting (XSS) vulnerabilities in DotClear before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post_id parameter to ecrire/trackback.php or the (2) tool_url parameter to tools/thememng/index.php. NOTE: some of these details are obtained from third party information.


Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01 when register_globals is enabled allow remote attackers to inject arbitrary web script or HTML via the (1) bg_color_1 (2) fs_menu (3) fc_menu (4) ff_menu (5) bg_color_2 (6) fs_normal (7) fc_normal and (8) ff_normal parameters to welcome_admin.php; and possibly unspecified other parameters and files. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag which allows remote attackers to conduct cross-site scripting (XSS) attacks as demonstrated using the UTF-7 character set.


Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly involving web.xml and HTTP 404 and 500 status codes.


WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string (2) Profiles (3) the Forum Post icon field (4) the Edit Profile and (5) the Gallery which has unknown impact and remote attack vectors possibly related to cross-site scripting (XSS).


Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary web script or HTML via (1) the showuser parameter to profile.php the (2) search_forum or (3) search_user parameter to search.php or (4) the userid parameter to change_password.php.


Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2 when $wgUseAjax is enabled allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter which is processed by Internet Explorer.


Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via (1) the go parameter (2) the keyword parameter in the search menu (go=search) or (3) the username or (4) the password in a go=Login action.


Multiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0 when magic_quotes_gpc is disabled allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) Projects (2) Contacts (3) Helpdesk (4) Search (only Gecko engine driven Browsers) and (5) Notes modules; the (6) Mail summary page; and unspecified other files.


Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message a different issue than CVE-2006-4843.


Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the searchkey parameter to index.php or the (2) sn or (3) ri parameter to modules/htmlframechat/index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5 6 and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path as demonstrated using en/frameset-7.html and possibly other unspecified vectors involving templates and (1) whstart.js and (2) whcsh_home.htm in WebHelp (3) wf_startpage.js and (4) wf_startqs.htm in FlashHelp or (5) WindowManager.dll in RoboHelp Server 6.


Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter as reachable through add_entry.php. NOTE: the original report stated that the vulnerability was in add_entry.php which does not receive the input data.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

the

administration

console

in

Secure

Computing

CipherTrust

IronMail

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

network

defRouterIp

hostName

domainName

ipAddress

defaultRouter

or

parameter

to

(a)

the

ipAddress

parameter

to

(b)

admin/systemOutOfBand.do;

the

password

or

confirmPassword

parameter

to

(c)

admin/systemBackup.do;

the

Klicense

parameter

to

(d)

admin/systemLicenseManager.do;

the

or

parameter

to

(e)

admin/systemWebAdminConfig.do;

the

or

parameter

to

(f)

admin/ldap_ConfigureServiceProperties.do;

the

parameter

to

(g)

admin/mailFirewall_MailRoutingInternal.do;

or

the

or

parameter

to

(h)

admin/mailIdsConfig.do.


Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via (1) the sxYear parameter to calendar.php (2) the search parameter to search.php (3) the linkid parameter to redirect.php or (4) the page parameter to calendar_events.php.


Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI a different vulnerability than CVE-2007-1049.


Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted \Accept-Language headers that do not conform to RFC 2616\.


Cross-site scripting (XSS) vulnerability in the embedded webserver in Daniel Naber LanguageTool before 0.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message possibly the demultiplex method in HTTPServer.java.


Cross-site scripting (XSS) vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

register.php

in

Woltlab

Burning

Board

(wBB)

and

Burning

Board

Lite

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

disablesmilies

disablebbcode

disableimages

and

parameters.

NOTE:

a

third-party

researcher

has

disputed

some

of

these

vectors

stating

that

only

the

and

parameters

in

Burning

Board

are

affected.


** DISPUTED ** Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in WordPress 2.1.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the demo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: another researcher disputes this issue stating that this is legitimate functionality for administrators. However it has been patched by at least one vendor.


lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data which allows remote attackers to have an unknown impact probably cross-site scripting (XSS).


A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6 and PHP 6.0 in CVS allows remote attackers to conduct cross-site scripting (XSS) attacks via GET POST or COOKIE array values which are not escaped in the phpinfo output as originally fixed for CVE-2005-3388.


Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1 when the login page contains a language selection box allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.


Cross-site scripting (XSS) vulnerability in pop_profile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.