CVE-2006-5122

CVE-2006-5122 , tied to Mercury SiteScope 8.2 (8.1.2.0), describes two XSS vectors where remote authenticated users can inject arbitrary script/HTML via (1) any field create name field (excluding the 2create new group name2) and (2) any description field. The connected documents confirm the vul...