Cofax 2.0 RC3 and earlier contains a cross-site scripting vulnerability in search.htm which allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view