Cross site scripting

2010-05-2514:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.1%

JSON

Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and 3.5.8019.4 allows remote attackers to inject arbitrary web script or HTML via the Work_Order_Summary parameter (aka the request summary). NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
datatrack_systemeq3.5.8019.4
datatrack_systemeq3.5

CPE	Name	Operator	Version
	datatrack_system	eq	3.5.8019.4
	datatrack_system	eq	3.5

References

osvdb.org/64727

packetstormsecurity.org/1005-exploits/datatrackserver35-xss.txt

secunia.com/advisories/39868

www.securityfocus.com/bid/40249

cross-site-scripting.blogspot.com/2010/05/datatrack-system-35-persistent-xss.html

exchange.xforce.ibmcloud.com/vulnerabilities/58732