CVE-2007-5625

CVE-2007-5625 describes a reflected cross-site scripting (XSS) vulnerability in the filename.asp component of ASP Site Search SearchSimon Lite 1.0. Exploitation occurs via the QUERY parameter, allowing remote attackers to inject arbitrary web script or HTML. The linked sources confirm the vulnera...