CVE-2007-5625 Cross-site scripting (XSS) vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter.
MediumCVSS 4.3
EPSS 3.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simongibson asp site search searchsimon lite | = 1.0 | No fix listed |
References
- 38069 vdb-entry
- 27337 third-party-advisory vendor-advisory
- 3275 third-party-advisory
- 20071020 [Aria-Security.Net] SearchSimon Lite Cross-Site Scripting Vuln. mailing-list
- 26142 exploit vdb-entry
- searchsimonlite-filename-xss(37340) vdb-entry