F5 FirePass 4100 SSL VPN installControl.php3 Cross-Site Scripting Vulnerability - Advisories - Secunia

IT セキュリティ

FirePass 4100で、installControl.php3にクロスサイトスクリプティングな脆弱性が存在するそうです

Input passed via the URL to the "installControl.php3" script is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

screenshot