CVE-2007-3940

Cross-site scripting XSS vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the svalue parameter in a search action. NOTE: some of these details are obtained from third party information...

CVE-2007-3940

CVE-2007-3940 describes a cross-site scripting (XSS) vulnerability in the QuickerSite 1.7.2 product, specifically in the default.asp page. The flaw allows remote attackers to inject arbitrary web script or HTML via the svalue parameter in a search action. The NVD notes a base score of 4.3 (Medium...