Description
Cross-site scripting (XSS) vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field (txtsearchtext parameter).
References
- 20061124 [Aria-Security Team] Fixit iDMS Pro Image Gallery SQL Injection mailing-list
- 1941 third-party-advisory
- http://www.aria-security.com/forum/showthread.php?t=39
- fixit-idms-search-xss(30514) vdb-entry
- 21282 vdb-entry
- 1017281 vdb-entry