CVE-2004-2193

The CVE-2004-2193 issue affects CJOverkill’s trade.php (versions older than 4.0.4) with a cross-site scripting (XSS) vulnerability. The flaw arises from insufficient sanitization of user-supplied input, enabling remote attackers to inject script via the tms[0] or url parameters. OpenVAS entries c...

CVE-2004-2193: Undefined Security Weakness

Cross-site scripting XSS vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the 1 tms0 or 2 url parameters...