Test ID:	1.3.6.1.4.1.25623.1.0.17226
Category:	Web application abuses
Title:	Verity Ultraseek search request XSS
Summary:	The remote host runs Verity Ultraseek, an Enterprise Search Engine Software.;; This version is vulnerable to cross-site scripting and remote script injection due to a lack of sanitization of user-supplied data.
Description:	Summary: The remote host runs Verity Ultraseek, an Enterprise Search Engine Software. This version is vulnerable to cross-site scripting and remote script injection due to a lack of sanitization of user-supplied data. Vulnerability Impact: Successful exploitation of this issue may allow an attacker to execute malicious script code on a vulnerable server. Solution: Upgrade to version 5.3.3 or higher CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0514 CERT/CC vulnerability note: VU#716144 http://www.kb.cert.org/vuls/id/716144 http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html http://www.mikx.de/index.php?p=6 http://secunia.com/advisories/14367
Copyright	Copyright (C) 2005 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.