CVE-2006-7058

CVE-2006-7058 : Concrete XSS vulnerabilities in the Sphider web search implementation (before 1.3.1c) allow remote attackers to inject arbitrary script/HTML via the catid parameter in two templates (standard/search_form.html and dark/search_form.html). Root cause: unsanitized catid value enabling...