← Database

CVE-2005-4060

MEDIUM CVSS: 4.3 Published: 2005-12-07 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.

Affected Platforms

Rainworx Rwauction Pro

Weakness Type

CWE-79

References