Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674...

CVE-2013-5495

Cross-site scripting XSS vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681...

CVE-2013-5495

Cisco Unified MeetingPlace Application Server Web Framework contains a cross-site scripting (XSS) vulnerability (CVE-2013-5495) that lets remote attackers inject arbitrary script/HTML via an unspecified parameter. Affects the web framework component of the Application Server; root cause is insuff...

CVE-2013-5494

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674...

PT-2013-5578

Name of the Vulnerable Software and Affected Versions Cisco Unified MeetingPlace Solution affected versions not specified Description A cross-site request forgery CSRF issue in the web framework of Cisco Unified MeetingPlace Solution allows remote attackers to hijack the authentication of arbitra...

PT-2013-5579

Name of the Vulnerable Software and Affected Versions Cisco Unified MeetingPlace affected versions not specified Description A cross-site scripting XSS issue exists in the web framework of the Application Server, allowing remote attackers to inject arbitrary web script or HTML via an unspecified...

CVE-2013-5495: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681...

CVE-2013-5471

Cisco GSS (Global Site Selector) web framework is affected by a Cross-site request forgery (CSRF) vulnerability (CVE-2013-5471). The issue allows an unauthenticated, remote attacker to hijack the authentication of a user by enticing them to follow a crafted link, enabling the attacker to submit a...

PT-2013-5561

Name of the Vulnerable Software and Affected Versions Cisco Global Site Selector GSS affected versions not specified Description A cross-site request forgery CSRF issue in the web framework of Cisco Global Site Selector GSS allows remote attackers to hijack the authentication of arbitrary users...

Cisco Global Site Selector Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework of Cisco GSS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...

[SECURITY] Fedora 19 Update: python-django14-1.4.6-1.fc19

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 19 Update: python-django-1.5.2-1.fc19

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Fedora Update for python-django FEDORA-2013-14797

Check for the Version of python-django OpenVAS Vulnerability Test Fedora Update for python-django FEDORA-2013-14797 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Apache Struts 2 ExceptionDelegator Arbitrary Remote Command Execution

The remote web application appears to use Struts 2, a web framework that utilizes OGNL Object-Graph Navigation Language as an expression language. Due to an error in the way that the ExceptionDelegator component handles mismatched data types, an unauthenticated, remote attacker can execute...

Design/Logic Flaw

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

CVE-2013-3444

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

Multiple Vulnerabilities in Cisco Web Security Appliance (cisco-sa-20130626-wsa)

According to its self-reported version, the version of Cisco Web Security Appliance running on the remote host has the following vulnerabilities : - Multiple unspecified vulnerabilities exist in the web framework that could allow a remote, authenticated attacker to execute arbitrary commands...

Multiple Vulnerabilities in Cisco Email Security Appliance (cisco-sa-20130626-esa)

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by multiple vulnerabilities : - An unspecified vulnerability exists in the web framework that could allow a remote, authenticated attacker to execute arbitrary commands...

Design/Logic Flaw

The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385...

CVE-2013-3438: Undefined Security Weakness

The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385...