vulnerability: Trend Micro Deep Discovery 3.8 index.html contentURL cross site scripting : 8/19/2015 10:58:18 AM

Group Chat & IM for Teams

Communicate with co-workers in real time. Used by Netflix, Dropbox & Salesforce. $0/unlimited users. Get started >>

From our sponsors

Vulnerability Advisories

Vulnerabilities of scip VulDB

Trend Micro Deep Discovery 3.8 index.html contentURL cross site scripting
8/17/2015 7:00:00 PM

General

scipID: 77325
Affected: Trend Micro Deep Discovery 3.8
Published: 08/18/2015
Risk: problematic

Created: 08/19/2015
Entry: 70.4% complete

Summary

A vulnerability was found in Trend Micro Deep Discovery 3.8. It has been classified as problematic. This affects an unknown function of the file index.html. The manipulation of the argument contentURL with an unknown input leads to a cross site scripting vulnerability. This is going to have an impact on confidentiality, and integrity.

The weakness was published 08/18/2015 as confirmed advisory (CERT.org). The advisory is shared for download at kb.cert.org. This vulnerability is uniquely identified as CVE-2015-2872 since 04/03/2015. The exploitability is told to be easy. It is possible to initiate the attack remotely. Technical details are known, but no exploit is available.

By approaching the search of inurl:index.html it is possible to find vulnerable targets with Google Hacking.

The vulnerability is also documented in the vulnerability database at X-Force (105698). Entries connected to this vulnerability are available at 77326.