CVE-2006-3157

CVE-2006-3157 describes a Cross-site scripting (XSS) vulnerability in index.php of Thinkfactory UltimateGoogle 1.00 and earlier, exploitable via the REQ parameter to inject arbitrary web script or HTML. The CVSSv2 base score is 5.8 (Medium) with network attack vector and no user interaction requi...