Description
Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm.
References
- http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html
- 21828 vdb-entry
- honeycomb-search-xss(23831) vdb-entry
- 18127 third-party-advisory
- 15995 vdb-entry