CVE-2008-2165

Cisco BBSM Captive Portal 5.3 is affected by a non-persistent XSS in AccessCodeStart.asp where the msg parameter is not properly filtered, allowing remote attackers to inject arbitrary script via crafted URLs. Impact is user browser execution of injected code; Cisco has released a patch/update fo...