CVE-2015-3422: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SearchBlox before 8.2.1 allows remote attackers to inject arbitrary web script or HTML via the menu2 parameter to admin/main.jsp...

SearchBlox Reflective Cross-Site Scripting Vulnerability

SearchBlox is an enterprise search solution built on Lucene. SearchBlox suffers from a reflected cross-site scripting vulnerability. Because input passed to the "/searchblox/admin/main.jsp" script via the "menu2" HTTP GET parameter is not properly filtered before being returned to the user, a...