Description
Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.
References
- 20296 third-party-advisory
- 18316 vdb-entry
- ADV-2006-1981 vdb-entry
- 20060524 CMS Mundo V1.0 mailing-list
- 994 third-party-advisory
- cmsmundo-search-xss(26695) vdb-entry