Description
The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug ID CSCuy96280.
References
- 1036238 vdb-entry
- 20160706 Cisco Prime Infrastructure Administrative Web Interface HTML Injection Vulnerability vendor-advisory