CVE-2006-2774

Cross-site scripting XSS vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchphrase parameter...

CVE-2006-2774

CVE-2006-2774 is an XSS vulnerability in QontentOne CMS, reported in search.php via the search_phrase parameter. The root cause, as described, is improper handling/sanitization of user-supplied input, allowing remote attackers to inject arbitrary web script or HTML. The documents state the impact...

CVE-2006-2774

Cross-site scripting XSS vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchphrase parameter...