CVE-2006-1486: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 bamin, 2 bemin, 3 pmin, and 4 state parameters...