Security Advisory
CVE-2002-0938
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.