Description
Cross-site scripting (XSS) vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter, as used by the "search box", and (2) res parameter.
References
- ADV-2006-2385 vdb-entry
- 20664 third-party-advisory
- mp3-searcharchive-index-xss(27234) vdb-entry
- 1112 third-party-advisory
- 20060615 MP3 Search/Archive v1.2 - XSS mailing-list
- 26530 vdb-entry