Cisco WebEx Training Center Training Registration Page Content Spoofing Vulnerability
BID:64305
Info
Cisco WebEx Training Center Training Registration Page Content Spoofing Vulnerability
| Bugtraq ID: | 64305 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-6969 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2013 12:00AM |
| Updated: | Dec 13 2013 12:00AM |
| Credit: | Cisco |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco WebEx Training Center Training Registration Page Content Spoofing Vulnerability
Cisco WebEx Training Center is prone to a content spoofing vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to insert and display spoofed content, which may aid in further attacks.
This issue is tracked by Cisco Bug ID CSCul35990.
Cisco WebEx Training Center is prone to a content spoofing vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to insert and display spoofed content, which may aid in further attacks.
This issue is tracked by Cisco Bug ID CSCul35990.
Exploit / POC
Cisco WebEx Training Center Training Registration Page Content Spoofing Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Solution / Fix
Cisco WebEx Training Center Training Registration Page Content Spoofing Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Cisco WebEx Training Center Training Registration Page Content Spoofing Vulnerability
References:
References: