EUVD-2007-5597

Malware in sbrugna...

searchsimon-xss.txt

Aria-Security Team http://Aria-Security.net/ ------------------------------------------------- SearchSimon Lite Cross-Site Scripting The file Name may be different in different websites PoC filename.asp?QUERY=XSS&Submit=Search%21&ACTION=SEARCH Credits Goes To Aria-Security Team Aria-Security.Net...

CVE-2007-5625: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter...