Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
avatic aardvark topsites php 5.0.3 |
||
avatic aardvark topsites php 5 |
||
avatic aardvark topsites php 5.1.2 |
||
avatic aardvark topsites php 4.0.2 |
||
avatic aardvark topsites php 4.2.2 |
||
avatic aardvark topsites php 4.1.1 |
||
avatic aardvark topsites php |