CVE-2009-0548

https://notcve.org/view.php?id=CVE-2009-0548

Cross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information. Vulnerabilidad de Secuencias de Comandos en Sitios Cruzados (XSS) en la interfaz Additional Report Settings de ESET Remote Administrator anterior a v3.0.105; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores no especificados. NOTA: algunos de los detalles se han obtenido de fuentes de terceros. • http://osvdb.org/51804 http://secunia.com/advisories/33805 http://www.eset.eu/support/changelog-eset-remote-administrator-3 http://www.vupen.com/english/advisories/2009/0339 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •