Description
Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.
References
- 26793 vdb-entry
- http://www.websense.com/SupportPortal/SupportKbs/1840.aspx
- 20071210 Advisory: Websense XSS Vulnerability mailing-list
- http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/
- ADV-2007-4158 vdb-entry
- 1019066 vdb-entry
- 3432 third-party-advisory
- 28019 third-party-advisory
- websenseenterprise-logon-page-xss(38936) vdb-entry