Multiple Cross-Site Scripting (XSS) Vulnerabilities in ASKIA askiaweb Administration Interface

CVE-2013-0124

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the (1) Number or (2) UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll.

Learn more about our Web App Pen Testing.