Cross-Site Scripting Flaw in AlgoSec Firewall Analyzer by AlgoSec
CVE-2013-7318

Currently unrated

Key Information:

Vendor

Algosec

Status
Firewall Analyzer
Vendor
CVE Published:
29 January 2014

What is CVE-2013-7318?

A cross-site scripting (XSS) vulnerability exists in the login component of AlgoSec Firewall Analyzer 6.4. This flaw permits remote attackers to exploit the application by injecting arbitrary web scripts or HTML into the message parameter. As a result, an attacker could potentially execute harmful scripts in the context of the user’s browser, leading to unauthorized actions or compromise of sensitive information.

References

http://packetstormsecurity.com/files/122899/algosec64-xss...
x_refsource_MISC
http://www.osvdb.org/96807
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.