CVE-2003-0404 Information

Description

Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5 and Vignette V/5 and V/6 allow remote attackers to insert arbitrary HTML and script via text variables as demonstrated using the errInfo parameter of the default login template.

Reference

http://marc.info/?l=bugtraq&m=105406028027360&w=2 http://www.iss.net/security_center/static/12071.php http://www.s21sec.com/es/avisos/s21sec-023-en.txt http://www.securityfocus.com/bid/7687