Cross site scripting

2008-05-1322:20:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the (1) search_text and (2) search_category parameters. NOTE: the XSS reportedly occurs in a forced SQL error message. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
cplinkseq1.03

CPE	Name	Operator	Version
	cplinks	eq	1.03

References

secunia.com/advisories/30024

www.securityfocus.com/bid/29035

www.vupen.com/english/advisories/2008/1431/references

exchange.xforce.ibmcloud.com/vulnerabilities/42171

www.exploit-db.com/exploits/5538