CVE-2006-3043

The CVE-2006-3043 entry documents a Cross-site Scripting (XSS) vulnerability in CreaFrameXe (CFXe) CMS 2.0 and earlier. The issue is triggered via the voltext_suche parameter in search.cfm, allowing remote attackers to inject arbitrary web script or HTML. Public references (NVD/NVD-listed) confir...

[MajorSecurity #14]CFXe-CMS <= 2.0 - XSS

MajorSecurity 14CFXe-CMS = 2.0 - XSS ---------------------------------------------- Software: CFXe-CMS Version: =2.0 Type: Cross site scripting Date: June, 10th 2006 Vendor: Creanet Internet Service AG Page: http://www.cms-cfx.ch Credits: ---------------------------- Discovered by: David...