EJ3 TOPo 2.2.178 Inc_header.PHP Cross-Site Scripting Vulnerability

No description provided by source...

Cross site scripting

Cross-site scripting XSS vulnerability in incheader.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter...

CVE-2006-0984

Cross-site scripting XSS vulnerability in incheader.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter...

CVE-2006-0984

CVE-2006-0984 affects EJ3 TOPo version 2.2.178, where the script inc_header.php is vulnerable to cross-site scripting (XSS). The underlying issue is that the gTopNombre parameter is used in a way that allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists an overall C...

EJ3-XSS.txt

Advisory: EJ3 TOPo Cross Site Scripting Vulnerability - Author: Yunus Emre Yilmaz || Yns [email protected] - Application: EJ3 TOPo http://ej3soft.ej3.net - Affected Version : v2.2.178 maybe older versions.. - Risk : Critical – Details : If an attacker access /code/incheader.php directly ,...

EJ3 TOPo 2.2.178 - Inc_header.php Cross-Site Scripting

EJ3 TOPo 2.2.178 - Incheader.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16879/info EJ3 TOPo is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

EJ3 TOPo - Cross Site Scripting Vulnerability

Advisory: EJ3 TOPo Cross Site Scripting Vulnerability - Author: Yunus Emre Yilmaz || Yns [email protected] - Application: EJ3 TOPo http://ej3soft.ej3.net - Affected Version : v2.2.178 maybe older versions.. - Risk : Critical – Details : If an attacker access /code/incheader.php directly ,...

EJ3 TOPo 2.2.178 - 'Inc_header.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16879/info EJ3 TOPo is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...