CVE-2013-5951

Multiple cross-site scripting XSS vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 application.js.php in scripts/ or 2 admin.php, 3 copymove.php, 4 functions.php, 5 header.php, or 6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 application.js.php in scripts/ or 2 admin.php, 3 copymove.php, 4 functions.php, 5 header.php, or 6...

CVE-2013-5951

CVE-2013-5951 affects extplorer (2.1.3) used as a Joomla! component. The vulnerability arises from multiple cross-site scripting (XSS) flaws via PATH_INFO in application.js.php, admin.php, copy_move.php, functions.php, header.php, and upload.php (include/ directory). Consequence: remote attackers...