Unscored CVE-2009-0743 EUVD-2009-0743GHSA-mw5g-cjmr-pr3j

Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 befo…

Published Feb 27, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.

References

33915 vdb-entry
1021778 vdb-entry
cisco-meetingplace-emailaddress-xss(48965) vdb-entry
20090226 Cisco Unified MeetingPlace Stored Cross-Site Scripting Vulnerability vendor-advisory
20090225 Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability mailing-list