Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE CVE VULNERABILITY TITLE RISK
2013-04-16 CVE-2013-1937 Cross-site Scripting vulnerability in PHPmyadmin
Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the (1) visualizationSettings[width] or (2) visualizationSettings[height] parameter.
network
low complexity
phpmyadmin CWE-79
6.1
2012-01-28 CVE-2012-0930 Cross-site Scripting vulnerability in Schneider-Electric Modicon Quantum PLC
Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
schneider-electric CWE-79
6.1
2006-11-10 CVE-2006-5847 Cross-site Scripting vulnerability in Freewebshop
Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
network
low complexity
freewebshop CWE-79
6.1
2004-03-26 CVE-2004-1865 Cross-site Scripting vulnerability in Bblog 0.7.2
Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name ($blogname).
network
low complexity
bblog CWE-79
4.8