vSpin Classified System 2004 search.asp minprice Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21190/info vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied data...

CVE-2006-6153

Multiple cross-site scripting XSS vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via 1 catname parameter to cat.asp or the 2 minprice parameter to search.asp...

PT-2006-6787 · Vspin.Net · Vspin.Net Classified System 2004

Name of the Vulnerable Software and Affected Versions: vSpin.net Classified System 2004 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be...