ciscoXSS.txt

FUJITSU SERVICES SECURITY ADVISORY DATE: 27-01-2006 AUTHOR: THOMAS LIAM ROMANIS VENDOR: Cisco PRODUCT: Cisco Secure ACS VERSIONS TESTED: Cisco Secure ACS version 2.3 UNIX hosted on Netscape FastTrack Server version 2.01c on Sun Solaris 8.0 TITLE: Cisco Secure ACS LogonProxy.cgi Cross Site Scripti...

CVE-2006-3101

Cisco Secure ACS for UNIX 2.3 is affected by a Cross-site scripting (XSS) vulnerability in LogonProxy.cgi. The issue allows remote attackers to inject arbitrary web script or HTML through the (1) error, (2) SSL, and (3) Ok parameters. This is a client-agnostic web vulnerability in the LogonProxy....

Cisco Secure ACS Cross Site Scripting Vulnerability.

FUJITSU SERVICES SECURITY ADVISORY DATE: 27-01-2006 AUTHOR: THOMAS LIAM ROMANIS VENDOR: Cisco PRODUCT: Cisco Secure ACS VERSIONS TESTED: Cisco Secure ACS version 2.3 UNIX hosted on Netscape FastTrack Server version 2.01c on Sun Solaris 8.0 TITLE: Cisco Secure ACS LogonProxy.cgi Cross Site Scripti...

Cisco Secure ACS crossite scripting

LogonProxy.cgi crossite scripting...