CWE-79 Archives - CVE Vulnerability

CVE-2008-7266

Sun, 26 Feb 2023 09:11:57 +0000

Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

The post CVE-2008-7266 appeared first on CVE Vulnerability.

CVE-2008-7271

Sun, 26 Feb 2023 09:11:57 +0000

Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add action to help/advanced/workingSetManager.jsp, a different issue than CVE-2010-4647.

The post CVE-2008-7271 appeared first on CVE Vulnerability.

CVE-2008-7275

Sun, 26 Feb 2023 09:11:57 +0000

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2.3.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) AgentTicketMailbox or (2) CustomerTicketOverView.

The post CVE-2008-7275 appeared first on CVE Vulnerability.

CVE-2008-7231

Sun, 26 Feb 2023 09:11:56 +0000

Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title).

The post CVE-2008-7231 appeared first on CVE Vulnerability.

CVE-2008-7242

Sun, 26 Feb 2023 09:11:56 +0000

Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) “a,” (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php.

The post CVE-2008-7242 appeared first on CVE Vulnerability.

CVE-2008-7250

Sun, 26 Feb 2023 09:11:56 +0000

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists because of an incomplete fix for CVE-2008-1168.

The post CVE-2008-7250 appeared first on CVE Vulnerability.

CVE-2008-7202

Sun, 26 Feb 2023 09:11:55 +0000

Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

The post CVE-2008-7202 appeared first on CVE Vulnerability.

CVE-2008-7206

Sun, 26 Feb 2023 09:11:55 +0000

Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the “logbook contains HTML code,” probably cross-site scripting (XSS).

The post CVE-2008-7206 appeared first on CVE Vulnerability.

CVE-2008-7213

Sun, 26 Feb 2023 09:11:55 +0000

Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to inject arbitrary web script or HTML via the Command parameter.

The post CVE-2008-7213 appeared first on CVE Vulnerability.

CVE-2008-7222

Sun, 26 Feb 2023 09:11:55 +0000

Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action.

The post CVE-2008-7222 appeared first on CVE Vulnerability.