Description
Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the SunMC Web Console.
References
- 33999 vdb-entry
- sunmc-performancereportingmodule-xss(49076) vdb-entry
- ADV-2009-0605 vdb-entry
- 34146 third-party-advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-125191-04-1
- 247046 vendor-advisory
- 1021809 vdb-entry