Unscored CVE-2001-0948 EUVD-2001-0931GHSA-cwm8-32rv-7w26

Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to exe…

Published Feb 2, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.

References

20011204 NMRC Advisory - Multiple Valicert Problems mailing-list
eva-admin-script-injection(7650) vdb-entry
http://www.valicert.com/support/security_advisory_eva.html
3619 vdb-entry