CVE-2011-0961

Public PoC / Exploit (2)

Exploit-DBCiscoWorks Common Services Framework 3.1.1 Help Servlet - Cross-Site Scripting Exploit-DBCisco Unified Operations Manager - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704.

Weaknesses (CWE)

CWE-79

Affected Products (11)

cisco · ciscoworks_common_servicesvulnerable

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html

Exploit

http://tools.cisco.com/security/center/viewAlert.x?alertId=23088

Vendor Advisory

http://www.exploit-db.com/exploits/17304

Exploit

http://www.securityfocus.com/bid/47902

Exploit

http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf

ExploitURL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/67523

http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html

Exploit