Unscored CVE-2012-2604 EUVD-2012-2590GHSA-g3wq-9c8j-rqmc

Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative inter…

Published Jun 13, 2012 · Updated Sep 16, 2024 · Assigned by certcc

Description

Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.

References

https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IyBX
http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
VU#709939 third-party-advisory