CVE-2008-2162

Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...

CVE-2008-2162

Affected software : SonicWall Email Security 6.1.1. Vulnerability : Cross-site scripting (XSS) in error pages due to insufficient sanitization of the Host header in requests to non-existent pages. Impact : remote attackers could inject arbitrary web script or HTML when the error page is rendered....