Lucene search
PRIOn knowledge basePRION:CVE-2022-31798HistoryAug 25, 2022 - 11:15 p.m.
Session fixation
2022-08-2523:15:00
PRIOn knowledge base
www.prio-n.com
5
nortek linear
e3-series
xss vulnerability
session fixation
admin account
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| emerge_e3_firmware | eq | <= 0.32-7p |
Related
cve
cve
CVE-2022-31798
2022-08-25 23:15:08
cvelist
cvelist
CVE-2022-31798
2022-08-25 22:15:45
nvd
nvd
CVE-2022-31798
2022-08-25 23:15:08
zdt
zdt
Nortek Linear eMerge E3-Series Account Takeover XSS Vulnerability
2022-08-08 00:00:00
nuclei
nuclei
Nortek Linear eMerge E3-Series - Cross-Site Scripting
2022-08-12 11:31:04
packetstorm
packetstorm
Nortek Linear eMerge E3-Series Account Takeover
2022-08-08 00:00:00