CVE-2010-3420

CVE-2010-3420 applies to PowerStore 3.0, where a cross-site scripting (XSS) flaw exists in Products_Results.php. The vulnerability is triggered by the totalRows_WADAProducts parameter, allowing remote injection of arbitrary web script/HTML. Affected component is the web interface; root cause is i...