CVE-2010-2290

Cross-site scripting XSS vulnerability in cgi-bin/cgix/help in McAfee Unified Threat Management UTM Firewall formerly SnapGear firmware 3.0.0 through 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2010-2290

CVE-2010-2290 affects McAfee Unified Threat Management (UTM) Firewall (formerly SnapGear) firmware 3.0.0–4.0.6. The vulnerability is a Cross-site Scripting (XSS) in the web interface, triggered by the page parameter sent to cgi-bin/cgix/help, enabling remote attackers to inject arbitrary web scri...