medium4.3Public exploit code
CVE-2009-0430
Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Active Bids - 'search' Cross-Site Scripting2009-01-15 · webapps · asp · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Activewebsoftwares | Active Bids | All versions |