medium4.3
CVE-2012-3238
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject …
Impact
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Astaro | Security Gateway Software | through 8.3 |
| Astaro | Security Gateway | All versions |
| Sophos | Unified Threat Management Software | through 8.3 |
| Sophos | Unified Threat Management | Versions 110, 120, 220, 320, 425, 525 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html
- http://security.inshell.net/advisory/27
- http://www.astaro.com/en-uk/blog/up2date/8305
- http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html
- http://security.inshell.net/advisory/27
- http://www.astaro.com/en-uk/blog/up2date/8305