CVE-2006-3377

CVE-2006-3377 affects JMB Software AutoRank PHP (versions ≤3.02) and AutoRank Pro (≤5.01). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter in search.php or the Username parameter in main.cgi. Ther...