Description
Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function.
References
- 1014556 vdb-entry
- 16147 third-party-advisory
- http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html
- http://www.cmsimple.dk/forum/viewtopic.php?t=2470
- 14346 vdb-entry
- 20060803 CMSimple Cross Site Scripting mailing-list
- http://www.aria-security.net/advisory/cmsimple.txt
- 18128 vdb-entry