CVE-2005-3866

CVE-2005-3866 involves a cross-site scripting (XSS) vulnerability in the SearchFeed Search Engine 1.3.2 and earlier . The flaw, likely exploitable via the REQ parameter used during a search, could allow remote attackers to inject arbitrary HTML and web script. The connected documents confirm the ...