CVE-2016-6359

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

CVE-2016-6359

CVE-2016-6359 is an XSS vulnerability in Cisco Smart Call Home Transport Gateway, affecting the Transport Gateway Installation Software 4.1(4.0). The root cause is insufficient input validation in the web framework, enabling remote attackers to inject arbitrary script or HTML by supplying a craft...