CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105

CVE-2006-4105 concerns a Cross-site Scripting (XSS) vulnerability in Fill Threads Database (FTD) version 3.7.3. The issue allows remote attackers to inject arbitrary web script or HTML through two vectors: the search field and an e-mail message. The provided documents confirm the affected product...

XSS Vulnerability in FTD v3.7.3

There are some XSS Vulnerabilities in FTD v3.7.3 and prior. XSS attacks HTML / Javascript codes will launch if they are submitted as a search in the search bar. They will also be launched when sent as a mail to yourself or a victim. Proof of Concept: To make sure it launches, you just need to add...