3 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in performsearch.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter...
2.6CVSS6.3AI score0.02372EPSS
SaveExploits1References8Affected Software1
CVE-2006-2648
The CVE-2006-2648 entry pertains to a Cross-site scripting (XSS) vulnerability in perform_search.asp of ASPBB 0.52 and earlier. The underlying issue is that an attacker can supply a malicious value in the search parameter, enabling remote execution of arbitrary HTML or web script in the context o...
2.6CVSS5.9AI score0.02372EPSS
SaveExploits1References8Affected Software1
20