• info
• discussion
• exploit
• solution
• references

NetauctionHelp Multiple Cross-Site Scripting Vulnerabilities

No exploit is required.

Example URI have been provided:

http://www.example.com/search.asp?sort=ed&L=[XSS]
http://www.example.com/search.asp?sort=[XSS]
http://www.example.com/search.asp?sort=ed&L=1&category=[XSS]
http://www.example.com/search.asp?sort=ed&L=1&category=65&categoryname=[XSS]