Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://securitytracker.com/id?1019043 | vdb-entry x_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2007/4102 | vdb-entry x_refsource_VUPEN |
| http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/ | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/484609/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/3449 | third-party-advisory x_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/38862 | vdb-entry x_refsource_XF |
| http://www.securityfocus.com/bid/26708 | vdb-entry x_refsource_BID |
| http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml | vendor-advisory x_refsource_CISCO |
| http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289 | x_refsource_CONFIRM |
| http://secunia.com/advisories/27902 | third-party-advisory x_refsource_SECUNIA |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|