Description
Cross-site scripting (XSS) vulnerability in Service_Requests.asp in VPMi Enterprise 3.3 allows remote attackers to inject arbitrary web script or HTML via the Request_Name_Display parameter.
References
- 20060314 vendor dispute: VCS mailing-list
- 23916 vdb-entry
- 17172 vdb-entry
- vpmi-servicerequests-xss(25339) vdb-entry
- 19297 third-party-advisory