← Database

CVE-2005-4063

MEDIUM CVSS: 4.3 Published: 2005-12-07 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) L, (2) sort, (3) category, (4) categoryname parameters to search.asp.

Affected Platforms

Netauctionhelp Netauctionhelp

Weakness Type

NVD-CWE-Other

References