CVE-2008-0533
28Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 29%
de la publicación al arma0 días
Publicada en NVD14 mar
1ª PoC12 mar
probabilidad de explotación
29%top 2% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediately after the Help argument, and possibly unspecified other vectors.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/31395⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://secunia.com/advisories/29351http://securityreason.com/securityalert/3743http://securitytracker.com/id?1019607https://exchange.xforce.ibmcloud.com/vulnerabilities/41156http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtmlhttp://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txthttp://www.securityfocus.com/archive/1/489463/100/0/threadedhttp://www.securityfocus.com/bid/28222http://www.vupen.com/english/advisories/2008/0868