CVE-2007-5702

Cross-site scripting (XSS) vulnerability in swamp/action/LoginActions (aka the login box) in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information.

Link	Resource
http://www.securityfocus.com/bid/26198
http://secunia.com/advisories/27390	Vendor Advisory
http://swamp.svn.sourceforge.net/viewvc/swamp/trunk/swamp/webapps/webswamp/src/java/de/suse/swamp/modules/actions/LoginActions.java?r1=666&r2=700
http://www.osvdb.org/38203
https://exchange.xforce.ibmcloud.com/vulnerabilities/37399
http://www.securityfocus.com/archive/1/482733/100/0/threaded

Configuration 1

cpe:2.3:a:novell:opensuse_swamp:*:*:*:*:*:*:*:*

---

Published : 2007-10-29 10:46

Updated : 2018-10-15 09:46

---

NVD link : CVE-2007-5702

Mitre link : CVE-2007-5702

No products.

CWE-79