CVE-2007-3261

Cross-site scripting XSS vulnerability in widgets/widgetsearch.php in dKret before 2.6 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-3261

CVE-2007-3261 affects dKret widgets/widget_search.php, with the vulnerable component being the search widget in dKret before version 2.6. The issue is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Connected docu...