Description
Cross-site scripting (XSS) vulnerability in search.cfm in CONTENS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the near parameter.
References
- ADV-2005-2981 vdb-entry
- contens-search-xss(23820) vdb-entry
- 21824 vdb-entry
- http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html
- 15943 vdb-entry
- 18143 third-party-advisory