7274 matches found
CVE-2007-4634
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...
CVE-2007-4633
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) affect versions before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1. The issue allows remote attackers to inject arbitrary web script or HTML via ...
CVE-2007-4634
CVE-2007-4634 affects Cisco CallManager and Unified Communications Manager (CUCM). The vulnerability is a SQL injection in the lang parameter on the (1) user and (2) admin logon pages (aka CSCsi64265). Affected versions include CUCM before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, a...
CVE-2007-4634: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...
CVE-2007-4633: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...
XSS and SQL Injection in Cisco CallManager/Unified Communications Manager Logon Page
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Cisco Security Advisory: XSS and SQL Injection in Cisco CallManager/Unified Communications Manager Logon Page
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: XSS and SQL Injection in Cisco CallManager/Unified Communications Manager Logon Page Advisory ID: cisco-sa-20070829-ccm http://www.cisco.com/warp/public/707/cisco-sa-20070829-ccm.shtml Revision 1.0 For Public Release 2007 Augu...
Cisco CallManager 4.2 / CUCM 4.2 - Logon Page 'lang' SQL Injection
source: https://www.securityfocus.com/bid/25480/info Cisco Unified CallManager and Unified Communications Manager are prone to multiple input-validation vulnerabilities because the applications fail to properly sanitize user-supplied input. These issues include a cross-site scripting vulnerabilit...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cisco Unified MeetingPlace Web Conferencing MP 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 Success Template STPL and 2 Failure Template FTPL parameters, which are not properly handled in an err...
CVE-2007-4294
Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...
CVE-2007-4284
Multiple cross-site scripting XSS vulnerabilities in Cisco Unified MeetingPlace Web Conferencing MP 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 Success Template STPL and 2 Failure Template FTPL parameters, which are not properly handled in an err...
CVE-2007-4284
CVE-2007-4284 affects Cisco Unified MeetingPlace Web Conferencing (MP)
CVE-2007-4294
CVE-2007-4294 describes an unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, 6.0 and Cisco IOS 12.0–12.4 that allows remote code execution via a malformed SIP packet (CSCsi80102). The connected documents confirm affected products and versions and that exploitation...
CVE-2007-4294
Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...
CVE-2007-4294: Undefined Security Weakness
Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...
[Full-disclosure] Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager
Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Advisory ID: cisco-sa-20070808-IOS-voice http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...
Cisco Unified MeetingPlace Web Conference跨站脚本漏洞
Cisco Unified MeetingPlace Web Conference是一款Web会议解决方案。 Cisco Unified MeetingPlace Web Conference不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是对多个参数缺少充分过滤，可导致恶意脚本注入。构建恶意WEB页，诱使用户访问，可导致获得敏感信息。目前没有详细漏洞细节提供。 Cisco Unified MeetingPlace Web Conference 5.3.104.3 Cisco Unified MeetingPlace Web Conference...
CVE-2007-4284: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Cisco Unified MeetingPlace Web Conferencing MP 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 Success Template STPL and 2 Failure Template FTPL parameters, which are not properly handled in an err...
Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...