CVE-2005-4477

The CVE-2005-4477 entry documents a Cross-site Scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier, exploitable via the bab[searchfor] parameter to inject arbitrary script/HTML. Affected software: papaya CMS (versions up to 4.0.4 and earlier). Root cause: input handling in the bab[searc...