CVE-2007-5923 in eTrust SiteMinderinfo

Summary

Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

11/09/2007

Disclosure

11/09/2007

Entries

1

CPE

ready

CWE

CWE-79

Exploit

Download

CVSS

4.3

EPSS

0.01442

CTI

0.00

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!