CVE-2010-2367

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2367

The CVE-2010-2367 entry concerns AD-EDIT2 prior to version 3.0.9, with a cross-site scripting (XSS) vulnerability in search.cgi that can allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected product: AD-EDIT2 (CMS). Root cause: XSS in the search.cgi handler; imp...