Unscored CVE-2006-5122 EUVD-2006-5107GHSA-cr2x-gvj3-j6cc

Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary…

Published Oct 2, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description field.

References

1670 third-party-advisory
mercurysitescope-multiple-xss(29295) vdb-entry
22215 third-party-advisory
20060929 Mercury SiteScope 8.2 (8.1.2.0) Cross Site Scripting (XSS) Vulnerability mailing-list
ADV-2006-3888 vdb-entry
20275 vdb-entry