|
EsContacts 'msg' Parameter Multiple Cross-Site Scripting Vulnerabilities
Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI. The following example URIs are available: http://www.example.com/EScontacts_path/EsContacts/login.php?msg=[XSS] http://www.example.com/EScontacts_path/EsContacts/importer.php?msg=[XSS] http://www.example.com/EScontacts_path/EsContacts/add_groupe.php?msg=[XSS] http://www.example.com/EScontacts_path/EsContacts/contacts.php?msg=[XSS] http://www.example.com/EScontacts_path/EsContacts/groupes.php?msg=[XSS] http://www.example.com/EScontacts_path/EsContacts/search.php?msg=[XSS] |
|
|
Privacy Statement |
