Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute arbitrary script as other users via the Term parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Netauction | Mewsoft | 3.0 (including) | 3.0 (including) |
References