CVE-2007-3540

CVE-2007-3540 describes multiple XSS vulnerabilities in rwAuction Pro 4.0/5.0. The flaw is in the search.asp page, exploitable via input parameters including search , show , searchtype , catid , and searchtxt . An attacker could inject arbitrary script/HTML through these inputs, with impact limit...