Description
Cross-site scripting (XSS) vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_phrase parameter.
References
- 20060531 QontentOneCMS v1.0 mailing-list
- 1016195 vdb-entry
- ADV-2006-2080 vdb-entry
- qontentone-search-xss(26835) vdb-entry
- 20060530 QontentOneCMS v1.0 mailing-list
- 18209 vdb-entry
- 20392 third-party-advisory