CVE-2006-3073

CVE-2006-3073 describes multiple XSS vulnerabilities in Cisco WebVPN for VPN 3000 Series Concentrators and ASA 5500 Series in WebVPN clientless mode. The flaw allows remote attackers to inject arbitrary web script or HTML via the domain parameter in dnserror.html and connecterror.html (bug IDs CS...