CVE-2013-2618
Beschrijving NL
Cross-site scripting (XSS) -kwetsbaarheid in editor.php in Network Weathermap vóór 0.97b stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de map_TITLE-parameter.
Origineel (Engels) tonen
Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web script or HTML via the map_title parameter.