Cross-Site Scripting Flaw in Wibu-Systems CodeMeter WebAdmin
CVE-2011-3689

Currently unrated

Key Information:

Vendor

Wibu

Status
Codemeter Webadmin
Vendor
CVE Published:
27 September 2011

What is CVE-2011-3689?

The Wibu-Systems CodeMeter WebAdmin exhibits a cross-site scripting vulnerability within the Licenses.html file. Attackers can exploit this weakness by injecting arbitrary web scripts or HTML content through the BoxSerial parameter, potentially allowing them to execute malicious code in the context of the user's session.

References

http://www.solutionary.com/index/SERT/Vuln-Disclosures/Co...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.