CVE-2002-0938

CVE-2002-0938 describes a cross-site scripting vulnerability in CiscoSecure ACS 3.0, allowing remote attackers to execute arbitrary scripts or HTML as other web users via the action parameter in a link to setup.exe. The available sources reiterate the same description but do not provide additiona...