Security Advisory

CVE-2010-1227

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-04-01 22:00:00

Last updated 2024-08-07 01:14:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site request forgery (CSRF) attack involving the cmd and argv parameters to cmd.msc.

← Browse all CVEs View on cve.org ↗