Design/Logic Flaw

Cisco Collaboration Server CCS 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by 1 changing .jhtml to %2Ejhtml, 2 changing .jhtml to .jhtm%6C, 3 appending %00 after .jhtml, and 4 appending %c0%80 after .jhtml,...

CVE-2010-0641

Cisco Collaboration Server (CCS) version 5 is affected by CVE-2010-0641, a cross-site scripting (XSS) vulnerability in LoginPage.jhtml that allows an attacker to inject arbitrary script via the dest parameter. Public documents confirm the issue originates in webline/html/admin/wcs/LoginPage.jhtml...