>> FileMaker Unspecified Data Handling Cross Site Scripting Vulnerability
Title : FileMaker Unspecified Data Handling Cross Site Scripting Vulnerability VUPEN ID : VUPEN/ADV-2007-3937 CVE ID : CVE-2007-6104
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-11-21
Technical Description
A vulnerability has been identified in FileMaker, which could be exploited by attackers to execute arbitrary scripting code. This issue is caused by unspecified input validation errors when processing user-supplied data, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected site.