CVE-2010-2826

Cisco WCS 6.0.x is affected by a SQL injection vulnerability (CVE-2010-2826) in the ORDER BY clause of the Client List screens. The issue allows an authenticated remote attacker to modify system configuration and potentially affect managed devices. The vulnerability is fixed in WCS 6.0.196.0. No ...