CVE-2013-0125

The CVE-2013-0125 entry describes a Cross-site Scripting (XSS) vulnerability in the C2 WebResource interface, specifically fileview.asp with the File parameter. The issue allows remote attackers to inject arbitrary script/HTML, enabling potential information leakage, privilege escalation, and den...

PT-2013-2112

Name of the Vulnerable Software and Affected Versions C2 WebResource affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the File parameter in the fileview.asp page. Recommendations At the moment...

CVE-2013-0125: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter...