Cross-Site Scripting Vulnerability in AlgoSec Firewall Analyzer by AlgoSec
CVE-2013-5092

Currently unrated

Key Information:

Vendor

Algosec

Status
Firewall Analyzer
Vendor
CVE Published:
29 January 2014

What is CVE-2013-5092?

A cross-site scripting vulnerability exists in the login component of AlgoSec Firewall Analyzer 6.1-b86. This weakness allows remote attackers to inject arbitrary web scripts or HTML into a vulnerable application via manipulated PATH_INFO parameters. If exploited, this could lead to session hijacking or the execution of malicious scripts in users' browsers, potentially compromising sensitive data and application integrity.

References

http://www.securityfocus.com/bid/61733
vdb-entryx_refsource_BID
http://packetstormsecurity.com/files/122737/algosec-xss.txt
x_refsource_MISC
http://www.osvdb.org/96806
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.