CVE-2007-5582

Description

Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/38862

http://www.vupen.com/english/advisories/2007/4102

http://www.securityfocus.com/bid/26708

http://www.securityfocus.com/archive/1/484609/100/0/threaded

http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/

http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289

http://securitytracker.com/id?1019043

http://securityreason.com/securityalert/3449

http://secunia.com/advisories/27902

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3