Description
Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950.
References
- 65145 vdb-entry
- cisco-video-cve20140673-xss(90733) vdb-entry
- 20140124 Cisco Video Surveillance 5000 Series HD IP Dome Camera Multiple Cross-Site Scripting Vulnerabilities vendor-advisory
- 1029689 vdb-entry
- 102557 vdb-entry
- 56552 third-party-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32568