CVE-2013-5500

Cisco MediaSense CVE-2013-5500 describes multiple XSS vulnerabilities in the oraadmin web page. The issue stems from insufficient input validation on a parameter, enabling an unauthenticated, remote attacker to conduct cross-site scripting against users of the web interface. Exploitation involves...