Cisco Emergency Responder Cross-Site Scripting Vulnerability (CNVD-2015-08365)

Cisco Emergency Responder's real-time location-address tracking database and enhanced routing capabilities can transfer emergency calls directly to the appropriate Public Safety Answering Point PASP based on the caller's location. A security vulnerability exists in the Web framework of Cisco...

Cisco Emergency Responder Cross-Site Request Forgery Vulnerability (CNVD-2015-08366)

Cisco Emergency Responder's real-time location-address tracking database and enhanced routing capabilities can transfer emergency calls directly to the appropriate Public Safety Answering Point PASP based on the caller's location. Cisco Emergency Responder 10.51 and 10.51a fails to implement...

CVE-2015-6407

Cisco Emergency Responder 10.53.10000.9 allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501...

CVE-2015-6406

Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.51.10000.5 allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781...

CVE-2015-6405

Cross-site request forgery CSRF vulnerability in Cisco Emergency Responder 10.51 and 10.51a allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501...

CVE-2015-6400

Multiple cross-site scripting XSS vulnerabilities in Cisco Emergency Responder 10.51a allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug ID CSCuv25547...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Emergency Responder 10.51 and 10.51a allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501...

Directory traversal

Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.51.10000.5 allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781...

Command injection

Cisco Emergency Responder 10.53.10000.9 allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Emergency Responder 10.51a allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug ID CSCuv25547...

CVE-2015-6406

Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.51.10000.5 allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781...

CVE-2015-6407

Cisco Emergency Responder 10.53.10000.9 allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501...

CVE-2015-6407

Cisco Emergency Responder 10.5(3.10000.9) is affected by a Web Framework Arbitrary File Upload vulnerability. The issue stems from insufficient parameter validation in the CER web framework, allowing unauthenticated remote attackers to upload arbitrary files to arbitrary locations on the device v...

CVE-2015-6406

CVE-2015-6406 describes a directory traversal vulnerability in Cisco Emergency Responder’s Tools menu. Affected software is Cisco Emergency Responder 10.5(1.10000.5). The root cause is improper sanitization of user-supplied input that forms a filename, allowing authenticated, remote attackers to ...

CVE-2015-6405

Cross-site request forgery CSRF vulnerability in Cisco Emergency Responder 10.51 and 10.51a allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501...

CVE-2015-6405

CVE-2015-6405 is a CSRF vulnerability in Cisco Emergency Responder (web framework) affecting version 10.5(1) and 10.5(1a). The issue arises from insufficient CSRF protection, allowing an unauthenticated, remote attacker to perform actions with a user’s privileges by tricking them into visiting a ...

CVE-2015-6400

Cisco Emergency Responder Web Framework Cross-Site Scripting Vulnerability (CVE-2015-6400) affects Cisco Emergency Responder 10.5(1a). The issue is a stored XSS flaw caused by insufficient validation on input fields in the web framework, allowing an unauthenticated, remote attacker to inject and ...

CVE-2015-6407: Improper Input Validation

Cisco Emergency Responder 10.53.10000.9 allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501...

CVE-2015-6406: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.51.10000.5 allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781...

PT-2015-7231

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 10.51.10000.5 Description A directory traversal issue exists in the Tools menu, allowing remote authenticated users to write to arbitrary files by using a crafted filename. Recommendations For Cisco Emergency...