|
|
CVE Reference: CVE-2006-3377 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-3377 |
|
|
Description: Cross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and AutoRank Pro 5.01 and earlier, allows remote attackers to inject arbitrary web script or HTML via the (1) Keyword parameter in search.php and the (2) Username parameter in main.cgi. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/27552 ST 1016428 1016429 SAID Secunia Advisory: SA20903 Secunia Advisory: SA20929 MISC http://www.majorsecurity.de/advisory/major_rls19.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/438941/100/0/threaded BID 18796 |
|
| Return to the previous page. |
