CVE-2004-0192

The CVE-2004-0192 entry concerns a Cross-site scripting (XSS) vulnerability in the Management Service of Symantec Gateway Security 2.0. The issue arises when a /sgmi URL contains malicious script that is not quoted in the resulting error page, enabling an attacker to steal cookies and hijack a ma...