CVE-2011-2538: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Cisco Video Communications Server VCS before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands...