Cross site scripting

2006-05-0910:02:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.6%

JSON

Cross-site scripting (XSS) vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter.

CPENameOperatorVersion
maxxscheduleeq1.0

CPE	Name	Operator	Version
	maxxschedule	eq	1.0

References

secunia.com/advisories/20039

securitytracker.com/id?1016093

www.osvdb.org/25446

www.securityfocus.com/bid/17892

www.vupen.com/english/advisories/2006/1700

exchange.xforce.ibmcloud.com/vulnerabilities/26310