CVE-2013-0125

Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cret@cert.org

Published

2013-04-04

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• C2 Webresource (C2enterprise)

References

• http://www.kb.cert.org/vuls/id/418923