Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 up to and including 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x prior to 4.0.1; VMware Stage Manager 1.x prior to 4.0.1; WebWorks Publisher 6.x up to and including 8.x; WebWorks Publisher 2003; and WebWorks ePublisher 9.0.x up to and including 9.3, 2008.1 up to and including 2008.4, and 2009.x prior to 2009.3 allow remote malicious users to inject arbitrary web script or HTML via (1) wwhelp_entry.html, reachable through index.html and wwhsec.htm, (2) wwhelp/wwhimpl/api.htm, (3) wwhelp/wwhimpl/common/html/frameset.htm, (4) wwhelp/wwhimpl/common/scripts/switch.js, or (5) the window.opener component in wwhelp/wwhimpl/common/html/bookmark.htm, related to (a) unspecified parameters and (b) messages used in topic links for the bookmarking functionality.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
webworks epublisher 2009.2 |
||
webworks epublisher 2009.1 |
||
webworks epublisher 9.1 |
||
webworks epublisher 9.0 |
||
webworks publisher 7.0 |
||
webworks publisher 8.0 |
||
webworks epublisher 2008.4 |
||
webworks epublisher 2008.3 |
||
webworks help 2.0 |
||
webworks help 3.0 |
||
webworks epublisher 2008.2 |
||
webworks epublisher 2008.1 |
||
webworks help 4.0 |
||
webworks help 5.0 |
||
webworks epublisher 9.3 |
||
webworks epublisher 9.2 |
||
webworks publisher 2003 |
||
webworks publisher 6.0 |
||
vmware vcenter 4.0 |
||
vmware esx server 4.0 |
||
vmware lab manager 2.0 |
||
vmware stage manager |
||
vmware vcenter lab manager 3.0 |
||
vmware vcenter lab manager 3.0.1 |
||
vmware vcenter lab manager 3.0.2 |
||
vmware vcenter lab manager 4.0 |
||
vmware server 2.0.2 |
||
vmware stage manager 1.0 |
||
vmware vcenter stage manager 1.0.1 |
Vulmon