CVE-2007-0925

CVE-2007-0925 describes a cross-site scripting (XSS) vulnerability in Community Server’s search/SearchResults.aspx, exploitable via the q parameter to inject arbitrary script/HTML. Affected component is the search results handler; underlying cause is improper handling/encoding of user input in th...