CVE-2008-2165

Cross-site scripting XSS vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager BBSM Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2008-2165

Cisco BBSM Captive Portal 5.3 is affected by a non-persistent XSS in AccessCodeStart.asp where the msg parameter is not properly filtered, allowing remote attackers to inject arbitrary script via crafted URLs. Impact is user browser execution of injected code; Cisco has released a patch/update fo...