Description
Cross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- 18360 third-party-advisory
- 16180 vdb-entry
- ADV-2006-0094 vdb-entry
- 22282 vdb-entry
- phpchamber-searchresult-xss(24029) vdb-entry