Topic:	SearchSimon Lite Cross-Site Scripting Vuln.
Credit:	Aria-Security Team
Date:	2007.10.23
CWE:	CWE-79 (Show similar)
CVE:	CVE-2007-5625 (Show details) Use CVE to see details like: - CVSS2, - Affected Software, - References

Aria-Security Team

http://Aria-Security.net/

-------------------------------------------------

SearchSimon Lite Cross-Site Scripting

The file Name may be different in different websites

PoC

filename.asp?QUERY=[XSS]&Submit=Search%21&ACTION=SEARCH

Credits Goes To Aria-Security Team

Aria-Security.Net

The-0utl4w