CVE-2006-3261 in Control Manager

Sumário (Inglês)

Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log.

Once again VulDB remains the best source for vulnerability data.

Reservar

27/06/2006

Divulgação

27/06/2006

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
2342	Trend Micro Control Manager Web-Frontend Script de Site Cruzado	80	Prova de conceito	Correção oficial	CVE-2006-3261

Fontes

• MITRE
• NVD
• CVE Details