Vulnerability Details CVE-2007-5581
Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.5%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/26462
- http://securitytracker.com/id?1018904
- http://www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml
- http://www.securityfocus.com/bid/26364
- http://www.vupen.com/english/advisories/2007/3772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38298
- http://secunia.com/advisories/26462
- http://securitytracker.com/id?1018904
- http://www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml
- http://www.securityfocus.com/bid/26364
- http://www.vupen.com/english/advisories/2007/3772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38298
Products affected by CVE-2007-5581
-
cpe:2.3:a:cisco:unified_meetingplace:-
-
cpe:2.3:a:cisco:unified_meetingplace:4.3.0.246
-
cpe:2.3:a:cisco:unified_meetingplace:4.3.0.246.5
-
cpe:2.3:a:cisco:unified_meetingplace:5
-
cpe:2.3:a:cisco:unified_meetingplace:5.0
-
cpe:2.3:a:cisco:unified_meetingplace:5.2
-
cpe:2.3:a:cisco:unified_meetingplace:5.3
-
cpe:2.3:a:cisco:unified_meetingplace:5.4
-
cpe:2.3:a:cisco:unified_meetingplace:6.0