CVE-2006-1431

The CVE-2006-1431 entry documents a Cross-site scripting (XSS) vulnerability in the fusionZONE couponZONE 4.2 product, specifically in local.cfm. The vulnerability allows remote attackers to inject arbitrary web script or HTML via URL-encoded parameters (1) srchfor and (2) srchby. The NVD descrip...