Description
Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) tms[0] or (2) url parameters.
References
- 10640 vdb-entry
- 11359 vdb-entry
- 20041011 CJOverkill 4.0.3 XSS Proof of Concept mailing-list
- 12786 third-party-advisory
- cjoverkill-trade-xss(17675) vdb-entry
- http://bbs.icefire.org/viewtopic.php?t=573
- 1011604 vdb-entry