CVE-2010-0641 – Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure

https://notcve.org/view.php?id=CVE-2010-0641

Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5 allows remote attackers to inject arbitrary web script or HTML via the dest parameter. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en webline/html/admin/wcs/LoginPage.jhtml en Cisco Collaboration Server (CCS) v5 permite a atacantes remotos inyectar secuencias arbitrarias de comandos web o HTML a través del parámetro "dest". • https://www.exploit-db.com/exploits/11403 http://www.exploit-db.com/exploits/11403 http://www.securityfocus.com/bid/38201 https://exchange.xforce.ibmcloud.com/vulnerabilities/56220 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •