Description
Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
References
- sscms-search-xss(25452) vdb-entry
- 17254 vdb-entry
- ADV-2006-1097 vdb-entry
- 19399 third-party-advisory
- 24120 vdb-entry
- http://pridels0.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html