CVE-2009-2442 Information

Description

Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action.

Reference

http://secunia.com/advisories/35745 http://www.packetstormsecurity.com/0907-exploits/linea-xss.txt http://www.vupen.com/english/advisories/2009/1837