Description
Cross-site scripting (XSS) vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 1019279 vdb-entry
- 20080129 Advisory: Tripwire Enterprise/Server XSS Vulnerability mailing-list
- ADV-2008-0372 vdb-entry
- 28687 third-party-advisory
- 27486 vdb-entry
- tripwire-login-xss(40016) vdb-entry
- 3610 third-party-advisory
- http://www.liquidmatrix.org/blog/2008/01/29/advisory-tripwire-enterprise-xss-vulnerability