CVE-2006-3043: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.cfm in CreaFrameXe CFXe CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the voltextsuche parameter...

[MajorSecurity #14]CFXe-CMS <= 2.0 - XSS

MajorSecurity 14CFXe-CMS = 2.0 - XSS ---------------------------------------------- Software: CFXe-CMS Version: =2.0 Type: Cross site scripting Date: June, 10th 2006 Vendor: Creanet Internet Service AG Page: http://www.cms-cfx.ch Credits: ---------------------------- Discovered by: David...