CVE-2007-5625

Cross-site scripting XSS vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter...

CVE-2007-5625

CVE-2007-5625 describes a reflected cross-site scripting (XSS) vulnerability in the filename.asp component of ASP Site Search SearchSimon Lite 1.0. Exploitation occurs via the QUERY parameter, allowing remote attackers to inject arbitrary web script or HTML. The linked sources confirm the vulnera...