Cisco MediaSense oraservice Cross-Site Scripting Vulnerability

A vulnerability in the oraservice page of Cisco MediaSense could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input validation of a parameter. An attacker...

CVE-2013-5501: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328...