Description
Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by AlpHaNiX · perlwebappsphp
https://www.exploit-db.com/exploits/8418
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49858
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/34504
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/8418
Scores
EPSS
0.0246
EPSS Percentile
85.3%
Details
CWE
CWE-79
Status
published
Products (1)
humayun_shabbir_bhutta/asp_product_catalog
1.0
Published
Apr 17, 2009
Tracked Since
Feb 18, 2026