CVE-2011-2544

Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488.

• CWE-79

• http://secunia.com/advisories/46057Vendor Advisory
• http://secunia.com/advisories/46109Vendor Advisory
• http://securityreason.com/securityalert/8393
• http://securitytracker.com/id?1026072
• http://www.exploit-db.com/exploits/17871Exploit
• http://www.securityfocus.com/archive/1/519698/100/0/threaded
• http://www.securityfocus.com/bid/49670
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69906
• http://secunia.com/advisories/46057Vendor Advisory
• http://secunia.com/advisories/46109Vendor Advisory
• http://securityreason.com/securityalert/8393
• http://securitytracker.com/id?1026072
• http://www.exploit-db.com/exploits/17871Exploit
• http://www.securityfocus.com/archive/1/519698/100/0/threaded
• http://www.securityfocus.com/bid/49670
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69906

Published

Sep 23, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2533The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28…
• CVE-2011-2534Buffer overflow in the clusterip_proc_write function in net/…7.8
• CVE-2011-2535chan_iax2.c in the IAX2 channel driver in Asterisk Open Sour…
• CVE-2011-2536chan_sip.c in the SIP channel driver in Asterisk Open Source…
• CVE-2011-2538Cisco Video Communications Server (VCS) before X7.0.3 contai…7.2
• CVE-2011-2543Buffer overflow in the cuil component in Cisco Telepresence …
• CVE-2011-2545Cross-site scripting (XSS) vulnerability in the SIP implemen…
• CVE-2011-2546SQL injection vulnerability in the web-based management inte…
• CVE-2011-2547The web-based management interface on Cisco SA 500 series se…
• CVE-2011-2549Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1…
• CVE-2011-2555Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 h…
• CVE-2011-2560The Packet Capture Service in Cisco Unified Communications M…