Vulnerability Type: Cross-Site Scripting
Products and affected versions: Cisco Security Monitoring, Analysis and Response System (CS-MARS) - All versions
Vendor Website: http://www.cisco.com/en/US/products/ps6241/
Cisco Advisory: https://tools.cisco.com/bugsearch/bug/CSCul16173
================= Vulnerability Details =================
A Cross Site Scripting vulnerability has been found in Cisco Security Monitoring, Analysis and Response System. The issue is due to the input passed via several fields (eg: isnowLatency) to the /Query/NewQueryResult.jsp page are not properly sanitised before being returned to the user. Other pages could be affected by this issue.
The vulnerability has been tested on Cisco Mars version. Other versions result affected by this vulnerability.
================= Proof Of Concepts =================
PoC-1: Test XSS:
========= Solutions =========
As CS-MARS reached the End of Software Maintenance milestone on April 11th, 2009, Cisco will not be releasing software or patches that mitigate the reported cross-site scripting vulnerability.
More information available at: http://www.cisco.com/en/US/products/ps6241/prod_eol_notices_list.html
================ Other References ================
============== Credits/Author ==============
Giovanni Delvecchio SmartNet s.r.l.
========== Disclaimer ========== All information is provided without warranty. The intent is to provide information to secure infrastructure and/or systems, not o be able to attack or damage. Therefore SmartNet s.r.l shall not be liable for any direct or indirect damages that might be caused by using this information.