Cross site scripting

Cross-site scripting XSS vulnerability in performsearch.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter...

CVE-2006-2648

Cross-site scripting XSS vulnerability in performsearch.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter...

CVE-2006-2648

The CVE-2006-2648 entry pertains to a Cross-site scripting (XSS) vulnerability in perform_search.asp of ASPBB 0.52 and earlier. The underlying issue is that an attacker can supply a malicious value in the search parameter, enabling remote execution of arbitrary HTML or web script in the context o...