F5 FirePass 4100 SSL VPN Cross-Site Scripting (XSS) and HTML Injection

F5 Network FirePass, "is a SSL VPN solution by F5 Networks". F5 Networks FirePass 4100 SSL VPN is vulnerable to XSS within the "my.logon.php3" and "my.activation.php3" server-side scripts.

http://www.securiteam.com/securitynews/6J0060KKKC.html