There is no user input sanitation for some parameters in trade.php in CJOverkill version 4.0.3, allowing for cross site scripting attacks to take place.
fb8ec6223316254b7134b54190da91977cf5dee5771fab54f779e3ca86aae2bc
© 2024 Packet Storm. All rights reserved.