PDA

View Full Version : F5 FirePass 4100 SSL VPN Cross-Site Scripting (XSS) and HTML Injection


newsbot
02-12-2007, 09:07 PM
F5 Network FirePass (http://www.f5.com/products/firepass/), "is a SSL VPN solution by F5 Networks". F5 Networks FirePass 4100 SSL VPN is vulnerable to XSS within the "my.logon.php3" and "my.activation.php3" server-side scripts.

http://www.securiteam.com/securitynews/6J0060KKKC.html