Unscored CVE-2013-0709 EUVD-2013-0720GHSA-4p52-qv89-2pv4

Cross-site scripting (XSS) vulnerability in dopvSTAR* 0091 allows remote attackers to inject arbitrary web script or HTML via the HTTP Refe…

Published Mar 1, 2013 · Updated Sep 16, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in dopvSTAR* 0091 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log.

References

JVN#36339873 third-party-advisory
http://tech.bayashi.net/ds/
JVNDB-2013-000014 third-party-advisory