Description
Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter.
References
- http://www.vulnerability-lab.com/get_content.php?id=504
- 81179 vdb-entry
- 53035 vdb-entry
- sichesearch-ssearch-xss(74914) vdb-entry
- 20120414 Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities mailing-list