CVE-2008-2165

Cross-site scripting XSS vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager BBSM Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2008-2165

Cisco BBSM Captive Portal 5.3 is affected by a non-persistent XSS in AccessCodeStart.asp where the msg parameter is not properly filtered, allowing remote attackers to inject arbitrary script via crafted URLs. Impact is user browser execution of injected code; Cisco has released a patch/update fo...

Cisco BBSM Captive Portal Cross-site Scripting

Title: Cisco BBSM Captive Portal Cross-site Scripting ------------------------------------------------------------- Vendor: Cisco Systems Vendor URL: www.cisco.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...

ciscobbsm-xss.txt

Title: Cisco BBSM Captive Portal Cross-site Scripting ------------------------------------------------------------- Vendor: Cisco Systems Vendor URL: www.cisco.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...