CVE-2004-2193

Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) tms[0] or (2) url parameters.

Date published : 2005-07-10

http://www.securityfocus.com/bid/11359

http://bbs.icefire.org/viewtopic.php?t=573