Vulnerabilities > Activewebsoftwares > Active Bids > Medium

DATE CVE VULNERABILITY TITLE RISK
2009-02-05 CVE-2009-0430 Cross-Site Scripting vulnerability in Activewebsoftwares Active Bids
Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp.
4.3