Description
Cross-site scripting (XSS) vulnerability in search.cfm in CreaFrameXe (CFXe) CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the voltext_suche parameter.
References
- http://www.majorsecurity.de/advisory/major_rls14.txt
- ADV-2006-2278 vdb-entry
- cfxe-cms-search-xss(27052) vdb-entry
- 20582 third-party-advisory
- 1016277 vdb-entry
- 20060610 [MajorSecurity #14]CFXe-CMS <= 2.0 - XSS mailing-list