Description
Multiple cross-site scripting (XSS) vulnerabilities in search.php in Sphider allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO and (2) the category parameter.
References
- 20060516 Sphider Multiple Xss Vulnerabilities mailing-list
- 25573 vdb-entry
- sphider-search-xss(26482) vdb-entry
- ADV-2006-1845 vdb-entry
- http://soot.shabgard.org/bugs/Sphider.txt
- 17997 vdb-entry
- 930 third-party-advisory