CVE-2002-2422

Description

Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message.

Affected products

• compaq / insight_management_agent2.0 – 2.0
• compaq / insight_management_agent2.1 – 2.1
• compaq / insight_management_agent2.1_b – 2.1_b
• compaq / insight_management_agent3.6.0 – 3.6.0
• compaq / insight_management_agent4.2 – 4.2
• compaq / insight_management_agent4.37 – 4.37

Exploits & proofs of concept

• exploit-dbHP Compaq Insight Manager - Web Interface Cross-Site Scriptingby Taylor Huff

References

• MISChttp://www.securiteam.com/windowsntfocus/6G00K0A5SM.html
• MISChttp://online.securityfocus.com/archive/1/294020
• MISChttp://online.securityfocus.com/archive/1/294160
• MISChttp://www.securityfocus.com/bid/5780
• MISChttp://www.securityfocus.com/archive/1/293715