Description
Multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the (1) search function, (2) advanced search function, and possibly other components.
References
- 38704 vdb-entry
- fatwire-search-xss(38305) vdb-entry
- 27663 third-party-advisory
- 26472 vdb-entry
- http://www.portcullis-security.com/223.php
- 38703 vdb-entry
- ADV-2007-3910 vdb-entry