6 lines
No EOL
419 B
Text
6 lines
No EOL
419 B
Text
source: https://www.securityfocus.com/bid/6253/info
|
|
|
|
The ext.dll ISAPI does not sufficiently sanitize user-supplied input when processing search queries. This may allow an attacker to create a custom URL containing script code that, when viewed in a browser by a legitimate user, will result in the execution of the script code.
|
|
|
|
');alert(document.cookie);//
|
|
')" style="left:expression(eval('alert(document.cookie)'))"> |