PT-2013-6096

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified...

PT-2013-6210

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue concerns the training-registration page in Cisco WebEx Training Center, which allows remote attackers to modify unspecified fields. Recommendations At the moment...

PT-2013-6213

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to discover session numbers and bypass host approval for audio-conference attendance by reading HTML source code. Recommendations At the...

PT-2013-6212

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. Recommendations At the moment, there is no information...

PT-2013-6214

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to discover registration IDs via a crafted URL. Recommendations At the moment, there is no information about a newer version that contain...

CVE-2013-6963: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207...

CVE-2013-6971: Improper Input Validation

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140...

CVE-2013-6710: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567...

CVE-2013-6709: Exposure of Sensitive Information to an Unauthorized Actor

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111...

CVE-2013-6973: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121...

CVE-2013-6968: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...

CVE-2013-6969: Improper Input Validation

The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990...

CVE-2013-6965: Undefined Security Weakness

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183...

CVE-2013-6972: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...

PT-2013-6095

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue concerns the registration component in Cisco WebEx Training Center, which provides the training-session URL before payment is completed. This allows remote...

PT-2013-6204

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description A cross-site scripting XSS issue exists in the registration component, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations ...

PT-2013-6209

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to enumerate attendees by analyzing different error messages for registration attempts, depending on whether the e-mail address exists...

PT-2013-6206

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from a provided URL. This occurs becaus...

Cisco WebEx Training Center Bypass Email Verification to Join Audio Conference Vulnerability

A vulnerability in the training center registration page of Cisco WebEx Training Center could allow an unauthenticated, remote attacker to attend the audio conference for a training session without having to confirm the email address. The vulnerability is due to the disclosure of the training...

Cisco WebEx Training Center Cross-Site Request Forgery Vulnerabilities

A vulnerability in the web framework of Cisco WebEx Training Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by persuading a user to...