CVE-2005-3866

Cross-site scripting XSS vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search...

CVE-2005-3866

CVE-2005-3866 involves a cross-site scripting (XSS) vulnerability in the SearchFeed Search Engine 1.3.2 and earlier . The flaw, likely exploitable via the REQ parameter used during a search, could allow remote attackers to inject arbitrary HTML and web script. The connected documents confirm the ...