CVE-2013-1107

The search function in Cisco Webex Social formerly Cisco Quad allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235...

CVE-2013-1107

The CVE-2013-1107 case concerns Cisco Webex Social (formerly Cisco Quad). The vulnerability is in the product’s search function, where remote authenticated users could read files via unspecified parameters (Bug ID CSCud40235). The entry has a CVSSv2 base score of 4.0 (Medium) with network attack ...

Cisco WebEx Training Center 权限限制绕过漏洞(CVE-2013-1110)

CVE ID:CVE-2013-1110 Cisco WebEx Training Center是一款电子教学,在线培训和在线课堂解决方案。 Cisco WebEx Training Center存在安全漏洞，允许通过验证的远程攻击者利用漏洞提交特制的URL绕过权限限制，禁用或启用培训中心录制功能。 0 Cisco WebEx Training Center 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1110...

CVE-2013-1110

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

CVE-2013-1108

Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064...

Design/Logic Flaw

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

Default credentials

Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064...

CVE-2013-1110

Cisco WebEx Training Center (the affected product) contains a vulnerability where remote authenticated users can bypass intended privilege restrictions by submitting a crafted URL, enabling or disabling training-center recordings. The underlying issue is a privilege-control bypass that lets an au...

CVE-2013-1110

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

CVE-2013-1108

Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064...

CVE-2013-1108

Cisco WebEx Training Center is affected by CVE-2013-1108. The vulnerability allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL (Bug ID CSCzu81064). The NVD entry records a CVSS v2 base score of 4.0 (MEDIUM) with Network attack vector, low attack comple...

It's Time to Abandon Java

As humans, we have a difficult time letting go of things. Whether it be a favorite pair of jeans, a beloved dog or an old friend who you know is just bringing you down, putting aside things we know well is hard to do. But sometimes things are just too broken to be useful any longer, and that’s th...

CVE-2012-6397

Cross-site scripting XSS vulnerability in Cisco WebEx Social formerly Cisco Quad allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977...

CVE-2013-1109

Cross-site request forgery CSRF vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco WebEx Social formerly Cisco Quad allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977...

CVE-2013-1109

Cisco WebEx Training Center is affected by CVE-2013-1109, a CSRF vulnerability in the Training Center testing library (testingLibraryAction.do) that could allow remote attackers to hijack the authentication of arbitrary users and trigger test deletions. The CVE entry notes a CVSS v2 base score of...

CVE-2012-6397

Cross-site scripting XSS vulnerability in Cisco WebEx Social formerly Cisco Quad allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977...

CVE-2012-6397

Cisco WebEx Social (formerly Cisco Quad) is affected by CVE-2012-6397, a Cross-site Scripting (XSS) vulnerability exploitable via a crafted RSS service link (Bug ID CSCub61977). The vulnerability enables remote attackers to inject arbitrary web script or HTML. Core impact is partial integrity exp...

CVE-2013-1109

Cross-site request forgery CSRF vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067...