CVE-2006-5122

Currently unrated

Key Information:

Vendor: HP
Status: Mercury Sitescope
Vendor: CVE Published:; 3 October 2006

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description field.

References

http://securityreason.com/securityalert/1670

third-party-advisoryx_refsource_SREASON

https://exchange.xforce.ibmcloud.com/vulnerabilities/29295

vdb-entryx_refsource_XF

http://secunia.com/advisories/22215

third-party-advisoryx_refsource_SECUNIA

Timeline

Vulnerability published
Oct 3, 2006
Vulnerability Reserved
Oct 2, 2006