Secunia

Juan de la Fuente Costa and Pablo Seijo Cajaraville have reported some vulnerabilities in Alcatel Omnivista 4760, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "action" parameter in php-bin/Webclient.php and to the "Langue" parameter is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in version R4.2 and prior.

Solution
OmniVista 4760 R4.2:
Further details available in Customer Area

Provided and/or discovered by
Juan de la Fuente Costa and Pablo Seijo Cajaraville, S21Sec

Original Advisory
S21Sec:
http://www.s21sec.com/avisos/s21sec-038-en.txt

Alcatel-Lucent:
http://www1.alcatel-lucent.com/psirt/statements/2007003/4760xss.htm

Deep Links
Links available in Customer Area