XSS in C2enterprise C2 Webresource
CVE-2013-0125
Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.017 (74.6th percentile) — read the EPSS interpretation.
Affected products
- C2enterprise C2_webresource
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Exploit, third-party-advisory)