CVE-2005-3522

Description

Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter.

Affected products

• adventnet / manageengine_netflow_analyzer4.0.2 – 4.0.2

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/22788
• MISChttp://www.securityfocus.com/bid/15127
• MISChttp://securitytracker.com/id?1015078
• MAILING_LISThttp://marc.info/?l=bugtraq&m=112967149509401&w=2
• VENDOR_ADVISORYhttp://secunia.com/advisories/17253/
• MISChttp://www.osvdb.org/20073