Description (CNA)
Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) L, (2) sort, (3) category, (4) categoryname parameters to search.asp.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.vupen.com/english/advisories/2005/2761
- http://www.osvdb.org/21474
- http://secunia.com/advisories/17902
- http://pridels0.blogspot.com/2005/12/netauctionhelp-v30-xss-vuln.html
- http://www.securityfocus.com/bid/15737
ADP enrichment
No English description supplied.