CVE-2004-2193

The CVE-2004-2193 issue affects CJOverkill’s trade.php (versions older than 4.0.4) with a cross-site scripting (XSS) vulnerability. The flaw arises from insufficient sanitization of user-supplied input, enabling remote attackers to inject script via the tms[0] or url parameters. OpenVAS entries c...

CVE-2004-2193

Cross-site scripting XSS vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the 1 tms0 or 2 url parameters...

[Full-Disclosure] CJOverkill 4.0.3 XSS Proof of Concept

+--------------------------------------------------------+ | CJOverkill 4.0.3 Cross Site Scripting Proof of Concept | | By aCiDBiTS [email protected] 10-Oct-2004 | +--------------------------------------------------------+ Your web application needs a security audit? Email me ! ------------...