CVE-2005-0548 - Characterful Authority

Description

Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function.

Reference

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1 http://marc.info/?l=bugtraq&m=111205163531628&w=2