Computer Security
[EN] securityvulns.ru no-pyccku


Cisco IOS crossite scripting
updated since 16.01.2009
Published:05.02.2009
Source:
SecurityVulns ID:9592
Type:remote
Threat Level:
5/10
Description:Crossite scripting in different scripts.
Affected:CISCO : Cisco IOS 12.0
 CISCO : Cisco IOS 12.1
 CISCO : Cisco IOS 12.2
 CISCO : Cisco IOS 12.3
 CISCO : Cisco IOS 12.4
CVE:CVE-2008-3821 (Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.)
Original documentdocumentazask2_(at)_gmail.com, Cisco IOS XSS/CSRF Vulnerability (05.02.2009)
 documentCISCO, Cisco Security Response: Cisco IOS Cross-Site Scripting Vulnerabilities (16.01.2009)
 documentProCheckUp Research, PR08-19: XSS on Cisco IOS HTTP Server (16.01.2009)
Files:Cisco Security Response: Cisco IOS Cross-Site Scripting Vulnerabilities

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod