CVE-2007-4479 Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter.
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aleadsoft.com search engine builder professional | = 2.40 | No fix listed |
References
- 37097 vdb-entry
- 26560 third-party-advisory
- securityvulns.ru exploit
- websecurity.com.ua
- 20070821 Vulnerabilities digest mailing-list
- 25391 vdb-entry
- searchenginebuilder-search-xss(36149) vdb-entry