CVE-2008-0494

Cross-site scripting XSS vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0494

The CVE-2008-0494 entry describes a Cross-site scripting (XSS) vulnerability in Endian Firewall 2.1.2, specifically in vpnum/userslist.php where the psearch parameter can be manipulated to inject arbitrary web script/HTML. The connected documents corroborate the affected product and parameter but...