CVE-2008-4888

Cross-site scripting XSS vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4888

CVE-2008-4888 is an XSS vulnerability in NetRisk 2.0 and earlier, exploitable via error parameter to index.php in error.php. Affected: NetRisk 2.0 and earlier. Impact: script/HTML injections in responses. Root cause: unvalidated error parameter leading to reflected HTML/JS. Public remediation det...