CVE-2010-2986

The CVE-2010-2986 entry concerns Cisco Wireless Control System (WCS) Web UI. A XSS flaw exists in webacs/QuickSearchAction.do within the search feature, allowing remote attackers to inject arbitrary web script or HTML via the searchText parameter. Affected versions include WCS prior to 6.0(194.0)...

CVE-2010-2986: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System WCS before 6.0194.0 and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, aka Bug ID...