cross-site scripting vulnerabilities and exploits

(subscribe to this query)

The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via HTML input, a...

Microsoft Anti-cross Site Scripting Library 3.1 Microsoft Anti-cross Site Scripting Library 4.0

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote malicious users to inject arbitrary web script or HTML via the last_message parameter to (1) add.php, (2) toBePublished.php, (3) index.php, and (4) admin.php; the PATH_INFO to the default URI to ...

Opendocman Opendocman 1.2.5

12 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote malicious users to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the co...

9 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote malicious users to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b) tem.php and (c) uss.php.

3 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote malicious users to inject arbitrary web script or HTML via (1) the max_file_size_purdy parameter in adminpanel/includes/helpfiles/help_mp3.php, (2) the message_text parameter in adminpanel/...

Grayscale Bandsite Cms 1.1

22 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote malicious users to inject arbitrary web script or HTML via the membername parameter to (1) members.php, (2) comments.php, (3) photos.php, (4) archive.php, or (5) cat.php. NOTE: the provena...

Chipmunk Scripts Chipmunk Blogger

5 EDB exploits

Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and previous versions, 5.x prior to 5.53, and 6.x prior to 6.03 allows remote malicious users to inject arbitrary web script or HTML via the Username parame...

Mailenable Mailenable Mailenable Mailenable 1.2 Mailenable Mailenable 1.2a Mailenable Mailenable 1.5 Mailenable Mailenable 1.6 Mailenable Mailenable 1.7 Mailenable Mailenable 1.17 Mailenable Mailenable 1.18 Mailenable Mailenable 1.19 Mailenable Mailenable 1.51 Mailenable Mailenable 1.52 Mailenable Mailenable 1.53

2 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=del...

Mywebland Mybloggie 2.1.2 Mywebland Mybloggie 2.1.3 Mywebland Mybloggie 2.1.3 Beta

10 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in Claroline prior to 1.8.10 allow remote malicious users to inject arbitrary web script or HTML via (1) the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to (2) announcements/announcements.php...

Claroline Claroline Claroline Claroline 1.2 Claroline Claroline 1.3 Claroline Claroline 1.4 Claroline Claroline 1.5 Claroline Claroline 1.5.3 Claroline Claroline 1.5.4 Claroline Claroline 1.6 Claroline Claroline 1.6 Beta Claroline Claroline 1.6 Rc1 Claroline Claroline 1.7 Claroline Claroline 1.7.1

12 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote malicious users to inject arbitrary web script or HTML via (1) the id parameter in an olsrd.xml action to pkg_edit.php, (2) the xml parameter to pkg.php, or the if parameter to (3) status_graph.p...

Bsdperimeter Pfsense 2.0

4 EDB exploits

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook