Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)

A cross-site-scripting vulnerability has been reported in Trend Micro InterScan Messaging Security Suite...

CVE-2012-2995

CVE-2012-2995 describes cross-site scripting vulnerabilities in Trend Micro InterScan Messaging Security Suite version 7.1-Build_Win32_1394. The stored XSS can be triggered via wrsApprovedURL in addRuleAttrWrsApproveUrl.imss, while non-persistent/reflected XSS can be triggered via src in initUpdS...

Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF Date: 13/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.trendmicro.com Software Link: http://www.trendmicro.com/ftp/products/interscan/IMSSv7.1Win1394.zip Version:...