CVE-2007-0183

Cross-site scripting XSS vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0183

The vulnerability CVE-2007-0183 affects iPlanet Web Server 4.x, where the /search endpoint is susceptible to cross-site scripting via the NS-max-records parameter. The root cause is improper handling of user-supplied input in that parameter, enabling remote attackers to inject arbitrary web scrip...