Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCus56150 and CSCus56146...

CVE-2015-4281

The CVE-2015-4281 issue affects Cisco WebEx Meetings Server 2.5 MR1 and is caused by insufficient CSRF protections, enabling a remote attacker to hijack user authentication by coercing a logged-in user to visit a malicious page or link. Documents in the connected set (including Cisco advisory Cis...

CVE-2015-4281

Cross-site request forgery CSRF vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCus56150 and CSCus56146...

Cisco WebEx Administration Site Stored Cross-Site Scripting Vulnerability

Cisco WebEx Meetings are web conferencing solutions. A cross-site scripting vulnerability exists in the implementation of admin site in Cisco WebEx Center, which can be exploited by a remote attacker to execute arbitrary script code in an affected site and access sensitive information by tricking...

Cisco WebEx Meeting Cross-Site Scripting Vulnerability

Cisco WebEx Meetings are web conferencing solutions. Cisco WebEx Meeting Center suffers from a cross-site scripting vulnerability in its implementation, which can be exploited by remote attackers to inject arbitrary web script or HTML via unspecified values...

Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by convincing a user of the affected system t...

Cisco WebEx Meetings Server Authenticated User Arbitrary Code Execution Vulnerability

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. Cisco WebEx Meetings Server has an unspecified security vulnerability that allows authenticated users to submit special data in command parameters to execute arbitrary code on the target system...

CVE-2015-4276

Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138...

Code injection

Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138...

CVE-2015-4276

CVE-2015-4276 affects Cisco WebEx Meetings Server 2.5MR1. The vulnerability arises from insufficient sanitization of user-supplied input, allowing an authenticated, remote attacker to craft a command parameter to execute arbitrary code on the target system. Impact per sources: remote code executi...

CVE-2015-4276

Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138...

Multiple cross-site scripting vulnerabilities in Cisco WebEx Meeting Center (CNVD-2015-04700)

Cisco WebEx Meeting Center is a web-based online meeting product within a suite of WebEx meeting solutions. A cross-site scripting vulnerability in Cisco WebEx Meeting Center allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

Cisco WebEx Meetings Server Remote Code Execution Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient sanitization of user-supplied input. An attacker could exploit this vulnerability by sending crafted data in a...

Cisco WebEx Meeting Center Information Disclosure Vulnerability (CNVD-2015-04037)

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. Cisco WebEx Meetings Server fails to properly handle GET parameters, allowing remote attackers to exploit the vulnerability by submitting special requests to obtain sensitive information...

Cisco WebEx Meeting Center Information Disclosure Vulnerability (CNVD-2015-04101)

Cisco WebEx Meeting Center is a set of WebEx meeting solutions in the United States Cisco Cisco company's WebEx online meeting products. An information disclosure vulnerability exists in Cisco WebEx Meeting Center. Because the program fails to properly determine the authentication used to read th...

Cisco WebEx Meeting Center GET Parameter Information Disclosure Vulnerability

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. Cisco WebEx Meetings Server fails to properly handle GET parameters, allowing remote attackers to exploit the vulnerability by submitting special requests to obtain sensitive information...

CVE-2015-4212

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

CVE-2015-4208

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...

Design/Logic Flaw

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

Sql injection

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...