Cisco IOS crossite scripting updated since 16.01.2009
Published:		05.02.2009
Source:		BUGTRAQ
SecurityVulns ID:		9592
Type:		remote
Level:		5/10
Description:		Crossite scripting in different scripts.

Affected:		CISCO : Cisco IOS 12.0
		CISCO : Cisco IOS 12.1
		CISCO : Cisco IOS 12.2
		CISCO : Cisco IOS 12.3
		CISCO : Cisco IOS 12.4
CVE:		CVE-2008-3821 (Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.)

Original document		azask2_(at)_gmail.com, Cisco IOS XSS/CSRF Vulnerability (05.02.2009)
		CISCO, Cisco Security Response: Cisco IOS Cross-Site Scripting Vulnerabilities (16.01.2009)
		ProCheckUp Research, PR08-19: XSS on Cisco IOS HTTP Server (16.01.2009)

Files:		Cisco Security Response: Cisco IOS Cross-Site Scripting Vulnerabilities
Discuss:		Read or add your comments to this news (0 comments)