Unscored CVE-2004-0606 EUVD-2004-0605GHSA-7q44-7gf4-9rcp

Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitr…

Published Jun 30, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request.

References

dnsone-dhcp-report-xss(16456) vdb-entry
10573 vdb-entry
20040619 Script injection in DNSONE appliance mailing-list