CVE-2007-5581

Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.

Link	Resource
http://www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml	Vendor Advisory
http://secunia.com/advisories/26462	Vendor Advisory
http://www.securityfocus.com/bid/26364
http://securitytracker.com/id?1018904
http://www.vupen.com/english/advisories/2007/3772
https://exchange.xforce.ibmcloud.com/vulnerabilities/38298

Configuration 1

cpe:2.3:a:cisco:unified_meetingplace:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_meetingplace:5.3:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_meetingplace:5.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_meetingplace:5.2:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_meetingplace:4.3.0.246:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_meetingplace:4.3.0.246.5:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_meetingplace:5:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*

---

Published : 2007-11-08 02:46

Updated : 2017-07-29 01:33

---

NVD link : CVE-2007-5581

Mitre link : CVE-2007-5581

No products.

CWE-79