Cisco CallManager Cross-Site Scripting Vulnerability - Advisories - Secunia

CiscoのCall Managerにクロスサイトスクリプティングの脆弱性が存在するそうです。

Input passed to parameters in the search form are not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

---