Description
Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
References
- 20080513 Cisco BBSM Captive Portal Cross-site Scripting mailing-list
- 20080514 Re: Cisco BBSM Captive Portal Cross-site Scripting mailing-list
- 29191 vdb-entry
- 30222 third-party-advisory
- 3895 third-party-advisory
- ADV-2008-1535 vdb-entry
- cisco-bbsm-accesscodestart-xss(42395) vdb-entry
- 1020018 vdb-entry