SearchBlox Reflective Cross-Site Scripting Vulnerability

SearchBlox is an enterprise search solution built on Lucene. SearchBlox suffers from a reflected cross-site scripting vulnerability. Because input passed to the "/searchblox/admin/main.jsp" script via the "menu2" HTTP GET parameter is not properly filtered before being returned to the user, a...