Description
Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session.
References
- VU#668206 third-party-advisory
- 20040923 New Macromedia Security Zone Bulletins Posted mailing-list
- jrun-management-console-xss(17483) vdb-entry
- 11245 vdb-entry
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html
- 12638 third-party-advisory