CVE-2014-3395

Cisco WebEx Meetings Server WMS 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343...

Code injection

Cisco WebEx Meetings Server WMS 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343...

CVE-2014-3395

Cisco WebEx Meetings Server WMS 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343...

CVE-2014-3395

Cisco WebEx Meetings Server (WMS) 2.5 has an unauthenticated remote arbitrary file-download vulnerability (CVE-2014-3395) due to insufficient user-input validation on crafted URLs. Impact: allows downloading arbitrary files to the affected device. Cisco advisory confirms the issue and software up...

Cisco WebEx Meetings Server Arbitrary Download Vulnerability

A vulnerability in Cisco WebEx Meetings Server Cisco WMS could allow an unauthenticated, remote attacker to download arbitrary files to an affected device. The vulnerability is due to insufficient user-input validation. An attacker could exploit this vulnerability by submitting crafted URL reques...

PT-2014-5285

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.5 Description The issue allows remote attackers to trigger the download of arbitrary files via a crafted URL. Recommendations For Cisco WebEx Meetings Server version 2.5, update to a version that contains ...

CVE-2014-3395: Improper Input Validation

Cisco WebEx Meetings Server WMS 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343...

WEBEX Cloud Service Detection

Binary data 8530.prm...

Cisco WebEx MeetMeNow Server Directory Traversal Vulnerability

A vulnerability in a PHP file in the Cisco WebEx MeetMeNow Server could allow an authenticated, remote attacker to obtain the contents of arbitrary files on an affected device. The vulnerability is due to improper sanitization of user input. An exploit could allow the attacker to view the content...

CVE-2014-3340

Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCuo16166...

Directory traversal

Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCuo16166...

CVE-2014-3340

Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCuo16166...

CVE-2014-3340

Cisco's advisory for CVE-2014-3340 confirms a directory-traversal flaw in the Cisco WebEx MeetMeNow Server PHP component. An authenticated, remote attacker could read arbitrary files readable by the Apache user due to improper input sanitization in a PHP file. Impact is limited to file disclosure...

PT-2014-5232

Name of the Vulnerable Software and Affected Versions Cisco WebEx MeetMeNow affected versions not specified Description A directory traversal issue exists in an unspecified PHP script in the Cisco WebEx MeetMeNow server, allowing remote authenticated users to read arbitrary files via a crafted...

CVE-2014-3340: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCuo16166...

CVE-2014-3302

user.php in Cisco WebEx Meetings Server 1.5.1.131 and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708...

Design/Logic Flaw

user.php in Cisco WebEx Meetings Server 1.5.1.131 and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708...

CVE-2014-3302

user.php in Cisco WebEx Meetings Server 1.5.1.131 and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708...

CVE-2014-3302

CVE-2014-3302 affects Cisco WebEx Meetings Server (1.5(.1.131) and earlier) in the user.php script. The root cause is an invalid token timer for authenticated encryption, allowing unauthenticated, remote attackers to view sensitive information via crafted URL requests. Exploitation described as u...

PT-2014-5197

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 1.5.1.131 and earlier Description The issue is related to the improper implementation of the token timer for authenticated encryption in the user.php file. This allows remote attackers to obtain sensitive...