CVE

Id
19213  
CVE No.
CVE-2006-3109  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657.  
Phase
Assigned (20060620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
171578 19213 CVE-2006-3109 FULLDISC:20060619 Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks  View
171579 19213 CVE-2006-3109 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047015.html  View
171580 19213 CVE-2006-3109 BUGTRAQ:20060619 Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks  View
171581 19213 CVE-2006-3109 URL:http://www.securityfocus.com/archive/1/archive/1/437757/100/0/threaded  View
171582 19213 CVE-2006-3109 FULLDISC:20060620 Re: Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks  View
171583 19213 CVE-2006-3109 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047019.html  View
171584 19213 CVE-2006-3109 MISC:http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+CallManager+XSS+Advisory.htm  View
171585 19213 CVE-2006-3109 CISCO:20060619 Cisco Response to: Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks  View
171586 19213 CVE-2006-3109 URL:http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_security_response09186a00806c0846.html  View
171587 19213 CVE-2006-3109 BID:18504  View
171588 19213 CVE-2006-3109 URL:http://www.securityfocus.com/bid/18504  View
171589 19213 CVE-2006-3109 VUPEN:ADV-2006-2443  View
171590 19213 CVE-2006-3109 URL:http://www.vupen.com/english/advisories/2006/2443  View
171591 19213 CVE-2006-3109 OSVDB:26651  View
171592 19213 CVE-2006-3109 URL:http://www.osvdb.org/26651  View
171593 19213 CVE-2006-3109 OSVDB:26652  View
171594 19213 CVE-2006-3109 URL:http://www.osvdb.org/26652  View
171595 19213 CVE-2006-3109 SECTRACK:1016328  View
171596 19213 CVE-2006-3109 URL:http://securitytracker.com/id?1016328  View
171597 19213 CVE-2006-3109 SECUNIA:20735  View
171598 19213 CVE-2006-3109 URL:http://secunia.com/advisories/20735  View
171599 19213 CVE-2006-3109 SREASON:1114  View
171600 19213 CVE-2006-3109 URL:http://securityreason.com/securityalert/1114  View
171601 19213 CVE-2006-3109 XF:cisco-callmanager-web-xss(27225)  View

Related JVN