CVE-2009-4866

Cross-site scripting XSS vulnerability in search.cgi in Matt's Script Archive MSA Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4866

The CVE-2009-4866 entry covers a Cross-site scripting (XSS) vulnerability in Matt's Script Archive (MSA) Simple Search 1.0’s search.cgi, where an attacker can inject arbitrary script or HTML via the terms parameter. The OpenVAS NASL corroborates this by listing Simple Search AS XSS vulnerability....