CVE-2010-3420

Vulnerability

PowerStore 3.0 contains a reflected Cross-Site Scripting (XSS) vulnerability in Products_Results.php. The totalRows_WADAProducts parameter is not properly sanitized before being returned to the user, allowing injection of arbitrary HTML and script code. Affected versions include PowerStore 3.0 and possibly other versions [1].

Exploitation

An attacker can exploit this by crafting a malicious URL with injected script in the totalRows_WADAProducts parameter and tricking a user into clicking it. No authentication is required; the user must be logged into the PowerStore application for the script to execute in the context of the session [1].

Impact

Successful exploitation allows the attacker to execute arbitrary HTML and JavaScript in the victim's browser within the context of the affected PowerStore site. This can lead to session hijacking, defacement, or theft of sensitive information [1].

Mitigation

As of the advisory, no official patch is available. The suggested workaround is to filter malicious characters and character sequences in a web proxy. Users should monitor for updates from WebAssist or consider upgrading to a newer, patched version [1].