Page 2 of 16 results (0.004 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207. Vulnerabilidad de XSS en el componente de registro en Cisco WebEx Training Center permite a atacantes remotos inyectar script web o HTML arbitrario a través de una URL manipulada, también conocido como Bug ID CSCul36207. • http://osvdb.org/100907 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6963 http://www.securityfocus.com/bid/64277 http://www.securitytracker.com/id/1029492 https://exchange.xforce.ibmcloud.com/vulnerabilities/89695 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126. Cisco WebEx Training Center permite a atacantes remotos descubrir números de sesión, y evadir la aprobación de host para asistencias de audio-conference, mediante la lectura de código fuente HTML, también conocido como Bug ID CSCul57126. • http://osvdb.org/100914 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6972 http://tools.cisco.com/security/center/viewAlert.x?alertId=32145 http://www.securityfocus.com/bid/64282 http://www.securitytracker.com/id/1029492 https://exchange.xforce.ibmcloud.com/vulnerabilities/89652 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990. La página training-registration en Cisco WebEx Training Center permite a atacantes remotos modificar campos no especificados a través de vectores desconocidos, también conocido como Bug ID CSCul35990. • http://osvdb.org/101003 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6969 http://www.securityfocus.com/bid/64305 https://exchange.xforce.ibmcloud.com/vulnerabilities/89684 • CWE-20: Improper Input Validation •

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567. Vulnerabilidad Cross-site requets forgery (CSRF) en Cisco WeBeX Training Center permite a atacantes remotos secuestrar la autenticación de victimas no especificadas a través de vectores desconocidos, tambien conocido como Bug ID CSCul25567. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6710 http://tools.cisco.com/security/center/viewAlert.x?alertId=32154 http://www.securitytracker.com/id/1029492 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121. Cisco WebEx Training Center permite a atacantes remotos descubrir IDs de registro a través de URL manipuladas, también conocido como Bug ID CSCul57121. • http://osvdb.org/100915 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6973 http://tools.cisco.com/security/center/viewAlert.x?alertId=32144 http://www.securityfocus.com/bid/64286 http://www.securitytracker.com/id/1029492 https://exchange.xforce.ibmcloud.com/vulnerabilities/89651 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •