CVE-2007-3486

Description

Cross-site scripting (XSS) vulnerability in AltaVista search engine allows remote attackers to inject arbitrary web script or HTML via the text parameter to the default URI.

Affected products

• altavista / search_engine

References

• MISChttp://websecurity.com.ua/1038/
• MISChttp://osvdb.org/36813