Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://online.securityfocus.com/archive/1/272935 | mailing list |
http://www.securityfocus.com/bid/4755 | vdb entry exploit |
http://www.iss.net/security_center/static/9103.php | vdb entry |