XSS in Activewebsoftwares Active Bids
CVE-2009-0430
Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.012 (64.7th percentile) — read the EPSS interpretation.
Affected products
- Activewebsoftwares Active_bids
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)