Cisco Products Online Help 多个跨站脚本攻击漏洞 CVE-2007-1467 CNNVD-200703-426

3.5 AV AC AU C I A
发布: 2007-03-16
修订: 2018-10-16

Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks和相关产品,Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC)和Wireless Control System (WCS)中的(1)PreSearch.html和(2)PreSearch.class文件存在多个跨站脚本攻击漏洞。远程攻击者可以借助搜索格式的文本字段,注入任意的web脚本或HTML。

0%
暂无可用Exp或PoC
当前有40条受影响产品信息