EUVD-2006-3106

Cross-site scripting XSS vulnerability in Cisco CallManager 3.3 before 3.35SR3, 4.1 before 4.13SR4, 4.2 before 4.23, and 4.3 before 4.31, allows remote attackers to inject arbitrary web script or HTML via the 1 pattern parameter in ccmadmin/phonelist.asp and 2 arbitrary parameters in...

CVE-2006-3109

Cross-site scripting XSS vulnerability in Cisco CallManager 3.3 before 3.35SR3, 4.1 before 4.13SR4, 4.2 before 4.23, and 4.3 before 4.31, allows remote attackers to inject arbitrary web script or HTML via the 1 pattern parameter in ccmadmin/phonelist.asp and 2 arbitrary parameters in...