Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
CPE | Name | Operator | Version |
---|---|---|---|
aqualogic_interaction | eq | 6.1 mp1 | |
aqualogic_interaction | eq | 6.1 | |
plumtree_foundation | eq | 6.0 | |
plumtree_foundation | eq | 6.0 sp1 |