CVE-2006-3264

The CVE-2006-3264 issue affects Namo DeepSearch 4.5, specifically the mclient.cgi component. Affected functionality is the p parameter, which can be used to inject arbitrary script/HTML (XSS) by remote attackers. The PT-2006-4158 entry confirms the vulnerability in mclient.cgi with parameter p an...

PT-2006-4158 · Namo · Namo Deepsearch

Name of the Vulnerable Software and Affected Versions: Namo DeepSearch version 4.5 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the p parameter in the mclient.cgi component. Recommendations: For Namo...