CVE		CVE-2008-3821
Status		Candidate
Description		Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.
Phase		Assigned (27.08.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3821
References		BID : 33260
		BUGTRAQ : 20090114 PR08-19: XSS on Cisco IOS HTTP Server
		CISCO : 20090114 Cisco IOS Cross-Site Scripting Vulnerabilities
		JVN : JVN#28344798
		MISC : http://www.procheckup.com/vulnerability_manager/vu...
		OSVDB : 51393
		OSVDB : 51394
		SECTRACK : 1021598
		SECUNIA : 33461
		SREASON : 4916
		VUPEN : ADV-2009-0138
		XF : cisco-ios-httpserver-ping-xss(47947)
SecurityVulns:		Cisco IOS crossite scripting