5 matches found
ciscoXSS.txt
FUJITSU SERVICES SECURITY ADVISORY DATE: 27-01-2006 AUTHOR: THOMAS LIAM ROMANIS VENDOR: Cisco PRODUCT: Cisco Secure ACS VERSIONS TESTED: Cisco Secure ACS version 2.3 UNIX hosted on Netscape FastTrack Server version 2.01c on Sun Solaris 8.0 TITLE: Cisco Secure ACS LogonProxy.cgi Cross Site Scripti...
CVE-2006-3101
Cisco Secure ACS for UNIX 2.3 is affected by a Cross-site scripting (XSS) vulnerability in LogonProxy.cgi. The issue allows remote attackers to inject arbitrary web script or HTML through the (1) error, (2) SSL, and (3) Ok parameters. This is a client-agnostic web vulnerability in the LogonProxy....
CVE-2006-3101: Undefined Security Weakness
Cross-site scripting XSS vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 error, 2 SSL, and 3 Ok parameters...
Cisco Secure ACS Cross Site Scripting Vulnerability.
FUJITSU SERVICES SECURITY ADVISORY DATE: 27-01-2006 AUTHOR: THOMAS LIAM ROMANIS VENDOR: Cisco PRODUCT: Cisco Secure ACS VERSIONS TESTED: Cisco Secure ACS version 2.3 UNIX hosted on Netscape FastTrack Server version 2.01c on Sun Solaris 8.0 TITLE: Cisco Secure ACS LogonProxy.cgi Cross Site Scripti...