Unscored CVE-2010-1655 EUVD-2010-1676GHSA-rmvh-6pm7-9q3c

Cross-site scripting (XSS) vulnerability in User/User_ChkLogin.asp in PowerEasy 2006 and PowerEasy SiteWeaver 6.8 allows remote attackers t…

Published Apr 30, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in User/User_ChkLogin.asp in PowerEasy 2006 and PowerEasy SiteWeaver 6.8 allows remote attackers to inject arbitrary web script or HTML via the ComeUrl parameter.

References

39696 vdb-entry
20100424 A XSS in User_ChkLogin.asp of PowerEasy 2006 mailing-list
39627 third-party-advisory
64094 vdb-entry