CVEvulnerability
CVE-2008-2165
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Affected configurations
• cisco building broadband service manager 5.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/30222 Vendor Advisory
- http://securityreason.com/securityalert/3895 securityreason.com
- http://securitytracker.com/id?1020018 securitytracker.com
- http://www.securityfocus.com/archive/1/492043/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/492093/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29191 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1535 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42395 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30222 Vendor Advisory
- http://securityreason.com/securityalert/3895 securityreason.com
- http://securitytracker.com/id?1020018 securitytracker.com
- http://www.securityfocus.com/archive/1/492043/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/492093/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29191 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1535 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42395 exchange.xforce.ibmcloud.com