Multiple Cisco MediaSense oraadmin Cross-Site Scripting Vulnerabilities

A vulnerability in the oraadmin service page of Cisco MediaSense could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against user of the web interface of the affected system. The vulnerability is due to insufficient input validation of a parameter. An...

CVE-2013-5500

Multiple cross-site scripting XSS vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338...

CVE-2013-5500

Multiple cross-site scripting XSS vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338...

CVE-2013-5500

Cisco MediaSense CVE-2013-5500 describes multiple XSS vulnerabilities in the oraadmin web page. The issue stems from insufficient input validation on a parameter, enabling an unauthenticated, remote attacker to conduct cross-site scripting against users of the web interface. Exploitation involves...

CVE-2013-5500: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338...