CVE-2008-6654

CVE-2008-6654 is an XSS vulnerability in InfoBiz Server’s search_results.php that allows injecting arbitrary script/HTML via the keywords parameter. Affected: InfoBiz Server (component: search_results.php). Root cause: reflects unvalidated user input into the page, enabling script execution in th...