Unscored CVE-2010-4109 EUVD-2010-4085GHSA-h5fg-f67m-h663

Cross-site scripting (XSS) vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrar…

Published Dec 8, 2010 · Updated Aug 7, 2024 · Assigned by hp

Description

Cross-site scripting (XSS) vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file.

References

HPSBMI02614 vendor-advisory
ADV-2010-3131 vdb-entry
1024827 vdb-entry