Description
Multiple cross-site scripting (XSS) vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCur25604.
References
- 1032304 vdb-entry
- 20150512 Cisco Headend Digital Broadband Delivery System Cross-Site Scripting Vulnerability vendor-advisory