CVE-2010-1072

CVE-2010-1072 describes an XSS vulnerability in Sniggabo CMS 2.21, exploitable via the q parameter in search.php. The root cause is insufficient input sanitization allowing arbitrary web script or HTML to be injected. Affected software/function/file: Sniggabo CMS 2.21, search.php (q parameter). I...

CVE-2010-1072

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...