Cisco Wireless Control System SQL Injection (cisco-sa-20100811-wcs) (credentialed check)

According to its self-reported version, the version of Cisco Wireless Control System installed on the remote host is 6.0.x before 6.0.196.0. Such versions have a SQL injection vulnerability. A remote, authenticated attacker could exploit this to modify the configuration of WCS or any wireless...

Cisco Secure Access Control System Version

The remote host is running Cisco Secure Access Control System ACS, an access control management and appliance system. It is possible to get the ACS version number via SSH. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69133; scriptversion"1.5";...

Cisco Wireless Control System Installed (Windows)

Cisco Wireless Control System WCS is installed on the remote host. WCS is used as the management component for Cisco Unified Wireless Network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69131; scriptversion"1.9";...

Cisco Wireless Control System Installed (Linux)

Cisco Wireless Control System WCS is installed on the remote host. WCS is used as the management component for Cisco Unified Wireless Network. TRUSTED...

Cisco Prime Network / Wireless Control System Health Monitor Detection

The web interface for Cisco Prime Network / Wireless Control System Health Monitor was detected on the remote host. Health Monitor is used to manage the high availability implementation for Network / Wireless Control System. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cisco Prime Network / Wireless Control System Health Monitor Reflected XSS

The version of Health Monitor a component of Cisco Prime Network / Wireless Control System hosted on the remote web server is affected by a reflective cross-site scripting vulnerability. Input to the 'requestUrl' parameter is not properly sanitized. An attacker could exploit this by tricking a us...

[SECURITY] Fedora 18 Update: kremotecontrol-4.10.5-1.fc18

KRemoteControl formerly known as KDELirc is a KDE frontend for your remote controls. It allows to configure actions for button presses on remotes. All types of remotes supported by the Solid module in the KDE platform are also supported by KRemoteControl e.g. with the Linux Infrared Remote Contro...

Cisco Secure Access Control System Help Index Cross-Site Scripting Vulnerability

A vulnerability in the Access Control System Help index page of Cisco Access Control System ACS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input...

Cisco Secure Access Control System Administration Page Cross-Site Scripting Vulnerability

A vulnerability in the Administration pages of Cisco Access Control System ACS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input validation of a...

Cisco Secure Access Control System Error Condition Information Disclosure Vulnerability

An issue in the web interface of Cisco Secure Access Control System ACS could allow an authenticated, remote attacker to view detailed error message information. The issue is due to insufficient filtering of error condition output. An attacker could exploit this issue by forcing the system to...

Cisco Secure Access Control System Admin/View Page Cross-Site Request Forgery Vulnerability

A vulnerability in the Cisco Access Control System ACS Administration and View pages could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...

CVE-2013-3428

The web interface in Cisco Secure Access Control System ACS does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957...

CVE-2013-3428

CVE-2013-3428 affects Cisco Secure Access Control System (ACS). The web interface does not properly suppress error-condition details due to insufficient filtering of error output, allowing remote authenticated users to obtain sensitive information via an error-triggering request (Bug ID CSCue6595...

CVE-2013-3428: Exposure of Sensitive Information to an Unauthorized Actor

The web interface in Cisco Secure Access Control System ACS does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957...

PT-2013-4384

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description The issue concerns the web interface in Cisco Secure Access Control System ACS, which fails to properly suppress error-condition details. This allows remote...

CVE-2013-3422

Cross-site scripting XSS vulnerability in Administration pages in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165...

CVE-2013-3423

Cross-site scripting XSS vulnerability in the web interface in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCud75174...

CVE-2013-3424

Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCud75174...

Cross site scripting

Cross-site scripting XSS vulnerability in the Help index page in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170...