The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system. Dat