CVE-2009-4866

The CVE-2009-4866 entry covers a Cross-site scripting (XSS) vulnerability in Matt's Script Archive (MSA) Simple Search 1.0’s search.cgi, where an attacker can inject arbitrary script or HTML via the terms parameter. The OpenVAS NASL corroborates this by listing Simple Search AS XSS vulnerability....

Simple Search 1.0 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Simple Search 1.0 Remote XSS Vulnerability + Software : Simple Search 1.0 + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz,...