25 matches found
CVE-2013-0125
The CVE-2013-0125 entry describes a Cross-site Scripting (XSS) vulnerability in the C2 WebResource interface, specifically fileview.asp with the File parameter. The issue allows remote attackers to inject arbitrary script/HTML, enabling potential information leakage, privilege escalation, and den...
PT-2013-2112
Name of the Vulnerable Software and Affected Versions C2 WebResource affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the File parameter in the fileview.asp page. Recommendations At the moment...
CVE-2013-0125: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter...
C2 WebResource - 'File' Cross-Site Scripting
source: https://www.securityfocus.com/bid/58838/info C2 WebResource is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
C2 WebResource - File Cross-Site Scripting
C2 WebResource - File Cross-Site Scripting source: https://www.securityfocus.com/bid/58838/info C2 WebResource is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...