Description
Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web script or HTML via the chemin parameter. NOTE: it is possible that this issue is resultant from CVE-2006-1492.
References
- 20060329 ExplorerXP : Directory Traversal and Cross Site Scripting mailing-list
- http://www.silitix.com/explorerxp.php
- explorerxp-dir-xss(25524) vdb-entry
- http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html
- ADV-2006-1165 vdb-entry
- 19460 third-party-advisory
- 24260 vdb-entry
- 17303 vdb-entry
- 1015840 vdb-entry