Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote malicious users to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
editeurscripts espartenaires 1.0 |