Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Proventia_network_ips_gx5008 | Ibm | 1.5 (including) | 1.5 (including) |
| Proventia_network_ips_gx5108 | Ibm | 1.3 (including) | 1.3 (including) |
References
- http://osvdb.org/36475
- http://secunia.com/advisories/25979
- http://www.sybsecurity.com/hack-proventia-1.pdf
- http://www.vupen.com/english/advisories/2007/2545
- http://osvdb.org/36475
- http://secunia.com/advisories/25979
- http://www.sybsecurity.com/hack-proventia-1.pdf
- http://www.vupen.com/english/advisories/2007/2545