Description
Cross-site scripting (XSS) vulnerability in Suchergebnisse.asp in Cabacos Web CMS 3.8.498 and earlier allows remote attackers to inject arbitrary web script or HTML via the suchtext parameter.
References
- cabacos-searchform-xss(27063) vdb-entry
- ADV-2006-2277 vdb-entry
- 1016276 vdb-entry
- 20060610 [MajorSecurity #13]Cabacos Web CMS<= 3.8 - XSS mailing-list
- 20583 third-party-advisory
- http://www.majorsecurity.de/advisory/major_rls13.txt