CVE-2005-4004

CVE-2005-4004 describes a cross-site scripting (XSS) vulnerability in the web interface of MyTemplateSite up to version 1.2, where an attacker can inject arbitrary script or HTML via the q parameter to search.asp. The affected component is the search functionality (search.asp) and the root cause ...