CVE-2010-2288

CVE-2010-2288 describes an XSS vulnerability in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951). The issue arises in dana/nc/ncrun.cgi where an attacker can inject arbitrary web script or HTML via the DSSignInURL cookie, potentially affecting users who visit a crafted page. The p...