Published: 10/09/2010 Updated: 09/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 455

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition prior to 8.5.0-11 on Linux allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hp insight diagnostics 7.6.0-23
hp insight diagnostics 7.7.0-142
hp insight diagnostics 7.8.0-159
hp insight diagnostics 7.9.1-15
hp insight diagnostics 7.0.0-30
hp insight diagnostics 7.5.5-1
hp insight diagnostics 6.3.0-15
hp insight diagnostics 6.3.1-1
hp insight diagnostics 7.4.0-11
hp insight diagnostics 7.0.1-8
hp insight diagnostics 7.9.0-105
hp insight diagnostics 7.5.0-14
hp insight diagnostics

source: wwwsecurityfocuscom/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected ...

source: wwwsecurityfocuscom/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the a ...

source: wwwsecurityfocuscom/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affec ...

source: wwwsecurityfocuscom/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the aff ...

source: wwwsecurityfocuscom/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte ...

CWE-79 http://www.vupen.com/english/advisories/2010/2245 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02492472 http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-05 https://nvd.nist.gov https://www.exploit-db.com/exploits/34543/

CVE-2010-3003

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect