Rainworx: >> Rwauction Pro >> 5.0 Security Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) show, (3) searchtype, (4) catid, and (5) searchtxt parameters, a different version and vectors than CVE-2005-4060.
CVSS Score
4.3
EPSS Score
0.003
Published
2007-07-03
Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.
CVSS Score
4.3
EPSS Score
0.007
Published
2005-12-07