CVE-2004-2566

LiveWorld products (LiveForum, LiveQ&A, LiveChat, LiveFocusGroup) contain multiple cross-site scripting (XSS) vulnerabilities. The root cause is related to input handling of the q parameter in specific JSP endpoints: search.jsp, findclub!execute.jspa, and search!execute.jspa. Exploitation details...