CVE-2006-1889

The CVE concerns Boardsolution (SCRIPTSOLUTION) by Nils Asmussen, specifically Boardsolution 1.12 and earlier. Vulnerable component: the search action handler in index.php. Issue: cross-site scripting (XSS) via the keyword parameter in the "Search for" input, allowing remote attackers to inject a...

CVE-2006-1889: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search action handler in index.php in Nils Asmussen aka SCRIPTSOLUTION Boardsolution 1.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Search for" item keyword parameter...