SearchFeed Search Engine XSS vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html Vendor:http://www.wwwsearchsolutions.com/searchfeed.php affected version:v1.3.2 and prior
Vuln. description: Input passed to the search parameters when performing a search isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.