The remote host is running CMSimple, a CMS written in PHP. The version of CMSimple installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field.

See http://www.cmsimple.dk/forum/viewtopic.php?t=2470

• http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html

---

Updated on 2015-03-25