Lucene search
PRIOn knowledge basePRION:CVE-2019-13407HistoryAug 29, 2019 - 1:15 a.m.
Cross site scripting
2019-08-2901:15:00
PRIOn knowledge base
www.prio-n.com
2
A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vd_1_firmware | le | 230 | |
| gv-vd8700_firmware | le | 1.01 | |
| gv-vr360_firmware | le | 1.10 |
