CVE-2006-4295

Description

Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter.

Affected products

• panda / panda_activescan5.53.00 – 5.53.00

Exploits & proofs of concept

• exploit-dbPanda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scriptingby Lostmon

References

• MISChttp://lostmon.blogspot.com/2006/08/panda-activescan-xss-vulnerability.html
• MISChttp://www.securityfocus.com/bid/19471
• MISChttp://www.osvdb.org/29147
• MISChttp://securitytracker.com/id?1016696