CVE-2010-4745

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2010-4745

CVE-2010-4745 is an XSS vulnerability in PHPXref (nav.html) prior to version 0.7.1, where an attacker could inject script/HTML via the query string. Affected component: PHPXref navigation page; root cause: lack of input sanitization on query parameters. Impact stated: cross-site scripting; no exp...

PHPXref 0.7 - nav.html Cross-Site Scripting

PHPXref 0.7 - nav.html Cross-Site Scripting source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code ...