CVE-2012-1779

Cross-site scripting XSS vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php...

CVE-2012-1779

CVE-2012-1779 describes a cross-site scripting (XSS) vulnerability in the IDevSpot idev-BusinessDirectory 3.0. The issue arises from unescaped input in the SEARCH parameter to index.php, allowing remote attackers to inject arbitrary web script or HTML. The connected sources (NVD/NVD-derived recor...

idev-BusinessDirectory 3.0 Cross Site Scripting

Title : idev-BusinessDirectory 3.0 Vulnerability Author : Red Security TEAM Date : 25/02/2012 Demo : http://www.idevspot.com/demos/idev-businessdirectory/ Dork : "Business Directory Software :: idev-BusinessDirectory 3.0" Tested On : CentOS Contact : Info at RedSecurity . COM Home :...