CVE-2013-5500

Cisco MediaSense CVE-2013-5500 describes multiple XSS vulnerabilities in the oraadmin web page. The issue stems from insufficient input validation on a parameter, enabling an unauthenticated, remote attacker to conduct cross-site scripting against users of the web interface. Exploitation involves...

CVE-2013-5500

Multiple cross-site scripting XSS vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338...

CVE-2013-5501

Cross-site scripting XSS vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328...

CVE-2013-5501

Cisco MediaSense is affected by a cross-site scripting (XSS) vulnerability in the oraservice page. The issue stems from insufficient input validation of a parameter, allowing an unauthenticated, remote attacker to execute arbitrary script or HTML in a user’s browser via a crafted link. Cisco’s ad...