CVE-2015-3422: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SearchBlox before 8.2.1 allows remote attackers to inject arbitrary web script or HTML via the menu2 parameter to admin/main.jsp...

PT-2015-6224

Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 8.2.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the menu2 parameter to the "admin/main.jsp" API endpoint. Recommendations For versions prior to...

SearchBlox Reflective Cross-Site Scripting Vulnerability

SearchBlox is an enterprise search solution built on Lucene. SearchBlox suffers from a reflected cross-site scripting vulnerability. Because input passed to the "/searchblox/admin/main.jsp" script via the "menu2" HTTP GET parameter is not properly filtered before being returned to the user, a...