CVE-2010-1143 – VMware View 3.1.x - URL Processing Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2010-1143

Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en VMware View (formalmente Virtual Desktop Manager o VDM) 3.1.x anteriores a v3.1.3 build 252693, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados. VMware View Portal versions 3.1 and below suffer from a cross site scripting vulnerability. • https://www.exploit-db.com/exploits/33940 https://www.exploit-db.com/exploits/12610 http://lists.vmware.com/pipermail/security-announce/2010/000092.html http://security.gentoo.org/glsa/glsa-201209-25.xml http://securitytracker.com/id?1023945 http://www.securityfocus.com/bid/39949 http://www.vmware.com/security/advisories/VMSA-2010-0008.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16298 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •