CA SiteMidner crossite scripting

login.fcc crossite scripting...

CA Siteminder login.fcc form xss vulnerability

Overview CA Siteminder R6 SP6 CR7, R12 SP3 CR8 and possibly previous versions, are vulnerable to a reflective cross site scripting XSS vulnerability. Description According to CA's website: "CA SiteMinder provides a centralized security management foundation that enables the secure use of the web ...

CVE-2005-2204

Cross-site scripting XSS vulnerability in Computer Associates CA eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," allows remote attackers to inject arbitrary web script or HTML via the 1 PASSWORD or 2 BUFFER parameters to smpwservicescgi.exe, 3 the TARGET parameter to...

SiteMinder 5.5 Multiple Script XSS

The remote host is running SiteMinder, an access-management solution from Netegrity / Computer Associates. The installed version of SiteMinder suffers from several cross-site scripting flaws in its 'smpwservicescgi.exe' and 'login.fcc' scripts. An attacker can exploit these flaws to inject...