CVE-2005-0802

Description

Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter.

Affected products

• asp_press / acs_blog0.8 – 0.8
• asp_press / acs_blog0.9 – 0.9
• asp_press / acs_blog1.0 – 1.0
• asp_press / acs_blog1.1b – 1.1b

References

• MISChttp://www.osvdb.org/14861
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/19728
• MISChttp://securitytracker.com/id?1013470
• MISChttp://www.securityfocus.com/bid/12836
• VENDOR_ADVISORYhttp://secunia.com/advisories/14625/
• MAILING_LISThttp://marc.info/?l=bugtraq&m=111108840811698&w=2