Description
Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter.
References
- 18569 vdb-entry
- ADV-2006-2476 vdb-entry
- ultimategoogle-index-xss(27271) vdb-entry
- 20742 third-party-advisory
- 1016352 vdb-entry
- http://pridels0.blogspot.com/2006/06/ultimategoogle-xss-vuln.html
- 26757 vdb-entry