CVE-2004-0787

Cross-site scripting XSS vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields...

CVE-2004-0787

OpenCA is vulnerable to an HTML injection/XSS in its web front end via form input fields. Affected versions are OpenCA 0.9.1-8 and earlier and 0.9.2 RC6 and earlier. The root cause is inadequate validation/ filtering of user input in the web form frontend, allowing injection of HTML/ script throu...