CVE-2004-0347 Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other...
MediumCVSS 6.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other users via the row parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscreen-sa 5000 series | All versions | No fix listed |
References
- 20040302 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance mailing-list
- 20040302 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance mailing-list
- 20040304 NetScreen Advisory 58412: XSS Bug in NetScreen-SA SSL VPN mailing-list
- VU#114070 third-party-advisory us-government-resource
- 9791 patch vdb-entry
- netscreen-delhomepagecgi-xss(15368) vdb-entry