CVE-2005-4063

Multiple cross-site scripting XSS vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 L, 2 sort, 3 category, 4 categoryname parameters to search.asp...

CVE-2005-4063

CVE-2005-4063 describes multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier . An attacker can inject arbitrary HTML/JavaScript via the parameters L, sort, category, and categoryname in the search.asp endpoint. The NVD entry lists a Medium severity (CVSS v2.0 base...