Description
Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh.
References
- 1016890 vdb-entry
- 29035 vdb-entry
- 20060920 Cisco Security Advisory: Cisco Guard Enables Cross Site Scripting vendor-advisory
- 21962 third-party-advisory
- 20122 vdb-entry
- cisco-guard-antispoffing-xss(29057) vdb-entry
- ADV-2006-3720 vdb-entry