CA Service Desk crossite scripting
Published:		10.12.2009
Source:		BUGTRAQ
SecurityVulns ID:		10463
Type:		remote
Level:		5/10
Description:		freeaccess.spl and webengine CGIs are vulnerable to crossite scripting.

Affected:		CA : CA Service Desk 12.1
CVE:		CVE-2009-4149 (Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.)

Original document

CA, CA20091208-01: Security Notice for CA Service Desk (10.12.2009)

Discuss:

Read or add your comments to this news (0 comments)