CVE

Id
15070  
CVE No.
CVE-2005-3866  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search.  
Phase
Assigned (20051129)  
Votes
None (candidate not yet proposed)  
Comments