CVE-2006-3101

Cisco Secure ACS for UNIX 2.3 is affected by a Cross-site scripting (XSS) vulnerability in LogonProxy.cgi. The issue allows remote attackers to inject arbitrary web script or HTML through the (1) error, (2) SSL, and (3) Ok parameters. This is a client-agnostic web vulnerability in the LogonProxy....