Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for building_broadband_service_manager by cisco

    CVE-2008-2165 (GCVE-0-2008-2165)

    Vulnerability from nvd – Published: 2008-05-16 06:54 – Updated: 2024-08-07 08:49
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/archive/1/492043/100… mailing-listx_refsource_BUGTRAQ
    http://www.securityfocus.com/archive/1/492093/100… mailing-listx_refsource_BUGTRAQ
    http://www.securityfocus.com/bid/29191 vdb-entryx_refsource_BID
    http://secunia.com/advisories/30222 third-party-advisoryx_refsource_SECUNIA
    http://securityreason.com/securityalert/3895 third-party-advisoryx_refsource_SREASON
    http://www.vupen.com/english/advisories/2008/1535 vdb-entryx_refsource_VUPEN
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://securitytracker.com/id?1020018 vdb-entryx_refsource_SECTRACK
    Date Public
    2008-05-14 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T08:49:58.504Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "20080513 Cisco BBSM Captive Portal Cross-site Scripting",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/492043/100/0/threaded"
              },
              {
                "name": "20080514 Re: Cisco BBSM Captive Portal Cross-site Scripting",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/492093/100/0/threaded"
              },
              {
                "name": "29191",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/29191"
              },
              {
                "name": "30222",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/30222"
              },
              {
                "name": "3895",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/3895"
              },
              {
                "name": "ADV-2008-1535",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2008/1535"
              },
              {
                "name": "cisco-bbsm-accesscodestart-xss(42395)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42395"
              },
              {
                "name": "1020018",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://securitytracker.com/id?1020018"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-05-14T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-11T19:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "20080513 Cisco BBSM Captive Portal Cross-site Scripting",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/492043/100/0/threaded"
            },
            {
              "name": "20080514 Re: Cisco BBSM Captive Portal Cross-site Scripting",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/492093/100/0/threaded"
            },
            {
              "name": "29191",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/29191"
            },
            {
              "name": "30222",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/30222"
            },
            {
              "name": "3895",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/3895"
            },
            {
              "name": "ADV-2008-1535",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2008/1535"
            },
            {
              "name": "cisco-bbsm-accesscodestart-xss(42395)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42395"
            },
            {
              "name": "1020018",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://securitytracker.com/id?1020018"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-2165",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "20080513 Cisco BBSM Captive Portal Cross-site Scripting",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/492043/100/0/threaded"
                },
                {
                  "name": "20080514 Re: Cisco BBSM Captive Portal Cross-site Scripting",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/492093/100/0/threaded"
                },
                {
                  "name": "29191",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/29191"
                },
                {
                  "name": "30222",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/30222"
                },
                {
                  "name": "3895",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/3895"
                },
                {
                  "name": "ADV-2008-1535",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2008/1535"
                },
                {
                  "name": "cisco-bbsm-accesscodestart-xss(42395)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42395"
                },
                {
                  "name": "1020018",
                  "refsource": "SECTRACK",
                  "url": "http://securitytracker.com/id?1020018"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-2165",
        "datePublished": "2008-05-16T06:54:00.000Z",
        "dateReserved": "2008-05-13T00:00:00.000Z",
        "dateUpdated": "2024-08-07T08:49:58.504Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-2165 (GCVE-0-2008-2165)

    Vulnerability from cvelistv5 – Published: 2008-05-16 06:54 – Updated: 2024-08-07 08:49
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/archive/1/492043/100… mailing-listx_refsource_BUGTRAQ
    http://www.securityfocus.com/archive/1/492093/100… mailing-listx_refsource_BUGTRAQ
    http://www.securityfocus.com/bid/29191 vdb-entryx_refsource_BID
    http://secunia.com/advisories/30222 third-party-advisoryx_refsource_SECUNIA
    http://securityreason.com/securityalert/3895 third-party-advisoryx_refsource_SREASON
    http://www.vupen.com/english/advisories/2008/1535 vdb-entryx_refsource_VUPEN
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://securitytracker.com/id?1020018 vdb-entryx_refsource_SECTRACK
    Date Public
    2008-05-14 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T08:49:58.504Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "20080513 Cisco BBSM Captive Portal Cross-site Scripting",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/492043/100/0/threaded"
              },
              {
                "name": "20080514 Re: Cisco BBSM Captive Portal Cross-site Scripting",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/492093/100/0/threaded"
              },
              {
                "name": "29191",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/29191"
              },
              {
                "name": "30222",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/30222"
              },
              {
                "name": "3895",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/3895"
              },
              {
                "name": "ADV-2008-1535",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2008/1535"
              },
              {
                "name": "cisco-bbsm-accesscodestart-xss(42395)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42395"
              },
              {
                "name": "1020018",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://securitytracker.com/id?1020018"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-05-14T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-11T19:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "20080513 Cisco BBSM Captive Portal Cross-site Scripting",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/492043/100/0/threaded"
            },
            {
              "name": "20080514 Re: Cisco BBSM Captive Portal Cross-site Scripting",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/492093/100/0/threaded"
            },
            {
              "name": "29191",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/29191"
            },
            {
              "name": "30222",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/30222"
            },
            {
              "name": "3895",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/3895"
            },
            {
              "name": "ADV-2008-1535",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2008/1535"
            },
            {
              "name": "cisco-bbsm-accesscodestart-xss(42395)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42395"
            },
            {
              "name": "1020018",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://securitytracker.com/id?1020018"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-2165",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "20080513 Cisco BBSM Captive Portal Cross-site Scripting",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/492043/100/0/threaded"
                },
                {
                  "name": "20080514 Re: Cisco BBSM Captive Portal Cross-site Scripting",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/492093/100/0/threaded"
                },
                {
                  "name": "29191",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/29191"
                },
                {
                  "name": "30222",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/30222"
                },
                {
                  "name": "3895",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/3895"
                },
                {
                  "name": "ADV-2008-1535",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2008/1535"
                },
                {
                  "name": "cisco-bbsm-accesscodestart-xss(42395)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42395"
                },
                {
                  "name": "1020018",
                  "refsource": "SECTRACK",
                  "url": "http://securitytracker.com/id?1020018"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-2165",
        "datePublished": "2008-05-16T06:54:00.000Z",
        "dateReserved": "2008-05-13T00:00:00.000Z",
        "dateUpdated": "2024-08-07T08:49:58.504Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }