EUVD-2006-1801

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbitrary web script or HTML via the searchexp parameter...

CVE-2006-1801

Cross-site scripting XSS vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbitrary web script or HTML via the searchexp parameter...

CVE-2006-1801

CVE-2006-1801 is an XSS vulnerability in planetSearch+ (planetsearchplus.php) that allows injecting arbitrary script via the search_exp parameter. Documents consistently describe the flaw as a cross-site scripting issue without indicating affected versions or specific exploitation details. The NV...

CVE-2006-1801

Cross-site scripting XSS vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbitrary web script or HTML via the searchexp parameter...

planetSearch+ - XSS Vulnerabilities

planetSearch+ - XSS Vulnerabilities -------------------------------------------------------- Software: planetSearch+ Version: 26.10.2005 Type: Cross Site Scripting Vulnerability Date: Apr 13 20:44:54 CEST 2006 Vendor: PlaNet Concept e.K. Page: http://www.planetc.de Risc: Low credits:...

PlanetSearch + - 'Planetsearchplus.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17527/info PlanetSearch + is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the...