EUVD-2013-6760

Malware in sbrugna...

EUVD-2013-6768

Malware in sbrugna...

Cisco WebEx Sales Center反射型跨站脚本漏洞

Bugtraq ID:64272 CVE ID:CVE-2013-6711 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center用于创建新产品的管理页面存在跨站脚本漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 Cisco WebEx Sales Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

Cisco WebEx Sales Center开放重定向漏洞

Bugtraq ID:64284 CVE ID:CVE-2013-6967 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center存在开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户到攻击者指定WEB站点，进行网络钓鱼等攻击。 0 Cisco WebEx Sales Center 厂商补丁： Cisco ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2013-6959

Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557...

Open redirect

Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557...

CVE-2013-6711

Cross-site scripting XSS vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540...

CVE-2013-6959

Cisco WebEx Sales Center contains an open redirect vulnerability (CVE-2013-6959). An unauthenticated, remote attacker could craft a URL that redirects users to an attacker-specified site, enabling phishing. The issue stems from an open redirect flaw in WebEx Sales Center, and Cisco’s advisory not...

PT-2013-6200

Name of the Vulnerable Software and Affected Versions Cisco WebEx Sales Center affected versions not specified Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. Recommendations At the moment, there is no information...

PT-2013-6097

Name of the Vulnerable Software and Affected Versions Cisco WebEx Sales Center affected versions not specified Description A cross-site scripting XSS issue exists in the product-creation administrative page, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-6711: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540...

CVE-2013-6967: Improper Input Validation

Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020...

CVE-2013-6959: Improper Input Validation

Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557...

PT-2013-6208

Name of the Vulnerable Software and Affected Versions Cisco WebEx Sales Center affected versions not specified Description The issue is related to an open redirect vulnerability in the mobile-browser subsystem, which allows remote attackers to redirect users to arbitrary web sites. This can be us...