CVE-2008-0684

CVE-2008-0684 documents a cross-site scripting (XSS) vulnerability in ViewCat.php of iTechClassifieds 3.0, exploitable via the CatID parameter to inject arbitrary web script/HTML. The root cause is lack of proper input validation/sanitization in Category ID handling, allowing attacker-supplied in...