CVE-2003-0217

Description

Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script.

Affected products

• neoteris / instant_virtual_extranet3.01 – 3.01

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=105283833617480&w=2