CVE-2010-4947

CVE-2010-4947 is an XSS flaw in ALLPC 2.5 affecting advanced_search_result.php where user-supplied keywords are not properly sanitized, allowing remote attackers to inject arbitrary web script or HTML via the keywords parameter. The root cause is input handling in that script leading to client-si...