Netsweeper Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
20 Jul. 2012
Summary
Netsweeper is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability.
Credit:
The original article can be found at: http://www.securityfocus.com/bid/54355
The information has been provided by Jacob Holcomb, Leland Public Schools /B>.
Vulnerable Systems:
*Netsweeper Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, add, delete or modify sensitive information, or perform unauthorized actions. Other attacks are also possible.
Vendor Status:
Vendor as issued an updated vulnerability.
