CVE-2006-1416 Information

Description

Cross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters possibly the question parameter.

Reference

http://pridels0.blogspot.com/2006/03/absolute-faq-manager-net-xss-vuln.html http://secunia.com/advisories/19396 http://www.osvdb.org/24127 http://www.securityfocus.com/bid/17242 http://www.vupen.com/english/advisories/2006/1096 https://exchange.xforce.ibmcloud.com/vulnerabilities/25463

Share on: