23 matches found
EUVD-2013-3327
Malware in sbrugna...
EUVD-2013-1147
Malware in sbrugna...
EUVD-2012-6252
Malware in sbrugna...
EUVD-2013-1284
Malware in sbrugna...
EUVD-2013-1285
Malware in sbrugna...
CVE-2013-1107
The search function in Cisco Webex Social formerly Cisco Quad allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235...
CVE-2012-6397
Cross-site scripting XSS vulnerability in Cisco WebEx Social formerly Cisco Quad allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977...
CVE-2013-1244
Cross-site scripting XSS vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL in the link field in a post, aka Bug ID CSCue67199...
CVE-2013-3392
Multiple cross-site request forgery CSRF vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355...
CVE-2013-1245
The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355...
CVE-2013-3392
Multiple cross-site request forgery CSRF vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405 and CSCuh10355...
CVE-2013-3392
CVE-2013-3392 affects Cisco WebEx Social. The issue stems from insufficient CSRF protections on multiple WebEx Social web pages, enabling an unauthenticated, remote attacker to hijack a user’s session by inducing them to perform unwanted actions. Root cause: CSRF protection gaps that allow arbitr...
CVE-2013-1245
The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID...
Input validation
The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID...
CVE-2013-1245
The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID...
CVE-2013-1245
Cisco WebEx Social’s user-management page is vulnerable to a client-side validation bypass that, due to insufficient server-side validation, lets an authenticated remote attacker inject arbitrary values into Screen Name, Email Address, First/Middle/Last Name, and Job Title fields. Impact: bypass ...
Cisco WebEx Social Client-Side Restriction Bypass Attribute Change Vulnerability
A vulnerability in the user management page of WebEx Social could allow an authenticated, remote attacker to inject arbitrary values into the Screen Name, Email Address, First Name, Middle Name, Last Name, and Job Title fields. The vulnerability is due to insufficient server-side validation of...