Cisco WebEx Meetings Server (WMS) 2.5 allows remote malicious users to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343.
A vulnerability in Cisco WebEx Meetings Server (Cisco WMS) could allow an unauthenticated, remote attacker to download arbitrary files to an affected device
The vulnerability is due to insufficient user-input validation An attacker could exploit this vulnerability by submitting crafted URL requests to a vulnerable device
Cisco has confirmed th ...