Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote malicious users to inject arbitrary web script or HTML via the q parameter.
source: wwwsecurityfocuscom/bid/15712/info
1-Search is prone to a cross-site scripting vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected ...
Vulmon