Unscored CVE-2007-5581 EUVD-2007-5556GHSA-36mh-7278-8282

Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow re…

Published Nov 8, 2007 · Updated Aug 7, 2024 · Assigned by cisco

Description

Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.

References

20071107 Cisco Unified MeetingPlace XSS Vulnerability vendor-advisory
26462 third-party-advisory
1018904 vdb-entry
26364 vdb-entry
cisco-meetingplace-mpx-xss(38298) vdb-entry
ADV-2007-3772 vdb-entry