CVE-2013-6968

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...

CVE-2013-6971

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140...

CVE-2013-6965

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183...

CVE-2013-6709

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111...

Design/Logic Flaw

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183...

Open redirect

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567...

Design/Logic Flaw

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...

Authentication flaw

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111...

Cross site scripting

Cross-site scripting XSS vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207...

CVE-2013-6709

Cisco WebEx Training Center’s registration page vulnerability (CVE-2013-6709) exposes the training-session URL before payment, enabling unauthenticated remote attackers to obtain the session password and access code and join the audio conference. Root cause: disclosure of session access data prio...

CVE-2013-6963

Cisco WebEx Training Center contains a cross-site scripting (XSS) vulnerability in the registration page (CVE-2013-6963). The issue stems from insufficient validation of user-supplied input, enabling an unauthenticated remote attacker to craft a malicious URL that, when a user follows it, may inj...

CVE-2013-6971

Cisco WebEx Training Center has an open redirect vulnerability (CVE-2013-6971) that can be exploited by an unauthenticated, remote attacker to redirect users to an attacker‑supplied URL via a crafted link. The issue is described in Cisco’s advisory Cisco-SA-20131213-CVE-2013-6971, which notes tha...

CVE-2013-6965

Cisco WebEx Training Center’s registration component leaks the training session URL before email confirmation, enabling remote attackers to join the audio conference using credentials from that URL. This bypasses access controls without requiring a valid email verification. Public details across ...

CVE-2013-6710

CVE-2013-6710 describes a CSRF vulnerability in Cisco WebEx Training Center that could allow remote attackers to hijack the authentication of users via unknown vectors. The issue is attributed to insufficient CSRF protections in the WebEx Training Center web framework, enabling an attacker to con...

CVE-2013-6972

Cisco WebEx Training Center exposes session numbers via server HTML responses, allowing remote attackers to discover valid session numbers and bypass host approval to join audio-conferences without attendee authorization. Root cause: inappropriate disclosure of sensitive information in server rep...

CVE-2013-6965

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183...

CVE-2013-6972

Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...

CVE-2013-6709

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111...

CVE-2013-6973

Cisco WebEx Training Center is affected by CVE-2013-6973 due to improper handling of inputs, allowing remote attackers to discover other users’ registration IDs via a crafted URL. The vulnerability enables unauthenticated information disclosure and is detailed in Cisco’s advisory Cisco-SA-2013121...