Description
Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other users via the row parameter.
References
- VU#114070 third-party-advisory
- netscreen-delhomepagecgi-xss(15368) vdb-entry
- 20040304 NetScreen Advisory 58412: XSS Bug in NetScreen-SA SSL VPN mailing-list
- 9791 vdb-entry
- 20040302 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance mailing-list
- 20040302 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance mailing-list