CVE-2007-0583

CVE-2007-0583 affects HTTP Commander 6.0 (and possibly earlier). It characterses multiple cross-site scripting (XSS) vulnerabilities that could allow remote attackers to inject arbitrary web script or HTML. The exploitation vectors reported are (1) the LogoffMessage parameter to logofflast.aspx a...