CVE-2010-0703

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• PortWise SSL VPN 4.6 - 'reloadFrame' Cross-Site Scripting2010-02-18 · remote · multiple · Verified

Impact

Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary web script or HTML via the reloadFrame parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/62482
• http://packetstormsecurity.org/1002-exploits/PR09-04.txt
• http://secunia.com/advisories/38627
• http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-04
• http://www.securityfocus.com/archive/1/509584/100/0/threaded
• http://www.securityfocus.com/bid/38308
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56420
• http://osvdb.org/62482
• http://packetstormsecurity.org/1002-exploits/PR09-04.txt
• http://secunia.com/advisories/38627
• http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-04
• http://www.securityfocus.com/archive/1/509584/100/0/threaded
• http://www.securityfocus.com/bid/38308
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56420