Description
Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields.
References
- http://www.openca.org/news/CAN-2004-0787.txt
- 20040906 OpenCA Security Advisory: Cross Site Scripting vulnerability mailing-list
- 11113 vdb-entry
- openca-frontend-xss(17274) vdb-entry