CVE-2007-5923

Cross-site scripting XSS vulnerability in forms/smpwservices.fcc in CA formerly Computer Associates eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204...

CVE-2007-5923

The CVE-2007-5923 entry describes a Cross-site scripting (XSS) vulnerability in CA eTrust SiteMinder components, specifically in forms/smpwservices.fcc, exposed via the SMAUTHREASON parameter. The vulnerability affects the SiteMinder Agent/web components and could allow an attacker to inject arbi...