Description
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters.
References
- 22716 third-party-advisory
- 20908 vdb-entry
- 20061104 Xenis.creator CMS - Multiple Cross mailing-list
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls31
- ADV-2006-4470 vdb-entry
- 1017162 vdb-entry
- xeniscreatorcms-default-xss(30019) vdb-entry