CVE-2009-3146: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchadvance.php in ArticleFriend Script allows remote attackers to inject arbitrary web script or HTML via the SearchWd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Omnistar Recruiting Cross Site Scripting

/ Omnistar Recruiting resumeregister.php job2 XSS Vulnerability Discovered by : MizoZ Contact : [email protected] Team : EvilWay Date : July 29 2009 Greetings : Moudi , Zuka, All friends / We can inject HTML code on the GET SearchWd in faille searchadvance.php . HOST/PATH/users/resumeregister.php?job2=X...