CVE-2010-0440

Cisco Secure Desktop < 3.5 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Matias Pablo Brutti · textremotehardware
https://www.exploit-db.com/exploits/33567

References (6)

Scores

EPSS 0.3931
EPSS Percentile 97.2%

Classification

CWE
CWE-79
Status published

Affected Products (4)

cisco/secure_desktop < 3.5
cisco/adaptive_security_appliance_software < 8.1\(2.7\)
cisco/adaptive_security_appliance_software < 8.0\(5\)
n/a/n/a

Timeline

Published Feb 03, 2010
Tracked Since Feb 18, 2026