CVE-2004-1059 | BDVDB-2026-7649 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.mikx.de/index.php?p=6
https://exchange.xforce.ibmcloud.com/vulnerabilities/18434
http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html
http://www.securityfocus.com/bid/11895
http://www.mnogosearch.org/history.html

Exploit#

No public exploit known

History#

Version 12004-12-31Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.