CVE-2011-1727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue...

HP SiteScope Detection

The remote host is running HP SiteScope, an agentless network monitoring application. HP SiteScope was formerly known as Mercury SiteScope. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53621; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate"...

HP SiteScope XSS

There is a cross-site scripting vulnerability in this installation of HP SiteScope that may allow an attacker to execute arbitrary script code in the browser of an unsuspecting user. Such script code could steal authentication credentials and be used to launch other attacks. %NASLMINLEVEL 70300 C...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

HP SiteScope is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user- supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the contex...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

HP SiteScope is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the context...

[security bulletin] HPSBMA02667 SSRT100464 rev.1 - HP SiteScope, Cross Site Scripting (XSS) and HTML Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Document ID: c02807712 Version: 1 HPSBMA02667 SSRT100464 rev.1 - HP SiteScope, Cross Site Scripting XSS and HTML Injection NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date: 2011-04-21 Last Update...

Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability

====================================================================== Secunia Research 20/10/2008 - HP SiteScope SNMP Trap Script Insertion - ====================================================================== Table of Contents Affected...

HP SiteScope crossite scripting

Script injections with SNMP traps...

HP SiteScope SNMP Trap消息HTML代码注入漏洞

BUGTRAQ ID: 31816 CVECAN ID: CVE-2007-4350 HP SiteScope提供无代理监控，补充现有基于代理的解决方案，帮助保持分布式IT基础架构的可用性和性能。 HP SiteScope在处理SNMP信息的显示时存在漏洞，可以将SiteScope服务器配置为接收设备的SNMP Trap，并可以通过Web界面查看SNMP监控的状态和所接收到SNMP trap消息的内容。由于未经过滤便在管理界面中呈现了SNMP消息，因此在查看信息时可能在用户浏览器会话中执行任意HTML和脚本代码。 HP SiteScope 9.0 build 911 HP --...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message...

CVE-2007-4350

Cross-site scripting XSS vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message...

CVE-2007-4350

Cross-site scripting XSS vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message...

CVE-2007-4350

HP SiteScope 9.0 build 911 contains a cross-site scripting (XSS) vulnerability in the management interface. The issue arises from rendering SNMP trap messages in the web UI without filtering, allowing an attacker to inject arbitrary HTML/script that could execute in a user’s browser. This affects...

CVE-2007-4350: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message...

HP Mercury SiteScope multiple security vulnerabilities

No description provided...

IOActive Security Advisory: Multiple Remote SiteScope Vulnerabilities

IOActive Security Advisory Title: Multiple Remote Vulnerabilities in Mercury SiteScope Severity: Critical Date Discovered: 10.05.2006 Date Reported: 05.21.2007 Date Disclosed: 09.20.2007 Affected Products: Mercury SiteScope - All Versions Synopsis: IOActive has discovered multiple critical...

CVE-2006-5122

Multiple cross-site scripting XSS vulnerabilities in Mercury SiteScope 8.2 8.1.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 "any field create name field" except "create new group name" or 2 any description field...

CVE-2006-5134

Mercury SiteScope 8.2 8.1.2.0 allows remote authenticated users to cause a denial of service loss of connectivity to the classic interface via attempted HTML injection into the "new monitor description" field...

CVE-2006-5134

Mercury SiteScope 8.2 8.1.2.0 allows remote authenticated users to cause a denial of service loss of connectivity to the classic interface via attempted HTML injection into the "new monitor description" field...

CVE-2006-5122

CVE-2006-5122 , tied to Mercury SiteScope 8.2 (8.1.2.0), describes two XSS vectors where remote authenticated users can inject arbitrary script/HTML via (1) any field create name field (excluding the 2create new group name2) and (2) any description field. The connected documents confirm the vul...