Web Management Interface XSS

• Tools:

• • Any VoIP device with user-configurable display fields
  • Example:
  • • http://voipsa.org/pipermail/voipsec_voipsa.org/2007-October/002452.html

• Mitigation:

• • Don’t use device web management interfaces
  • Demand more secure protocol stacks from your device vendors