CVE-2005-4063 | BDVDB-2026-13877 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) L, (2) sort, (3) category, (4) categoryname parameters to search.asp.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2005/2761
http://www.osvdb.org/21474
http://secunia.com/advisories/17902
http://pridels0.blogspot.com/2005/12/netauctionhelp-v30-xss-vuln.html
http://www.securityfocus.com/bid/15737

Exploit#

No public exploit known

History#

Version 12005-12-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.