CVE-2022-50802

ETAP Safety Manager 1.0.0.32 is affected by an unauthenticated reflected XSS in the 'action' GET parameter. The vulnerability allows injection of HTML/JavaScript to execute in victims’ browsers, potentially leaking credentials or enabling unauthorized actions. The issue is documented across multi...

ETAP Safety Manager 跨站脚本漏洞

ETAP Safety Manager is a centralized monitoring and management system for emergency lighting from ETAP. A cross-site scripting vulnerability exists in ETAP Safety Manager version 1.0.0.32, which stems from a cross-site scripting vulnerability in the action GET parameter that could lead to malicio...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

CVE-2022-40912

ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting XSS. Input passed to the GET parameter 'action' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user's browser session in...

CVE-2016-11015

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.XTWSZ-COMURLFilter.BlackList.1.URL parameter...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

CVE-2016-11014

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case...

Cross site scripting

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

CVE-2016-11015

NETGEAR JNR1010 devices prior to firmware 1.0.0.32 are affected by a CSRF vulnerability in the web UI: cgi-bin/webproc can be invoked via the parameter :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL. The issue enables cross-site request forgery. Remediation: upgrade to firmware vers...

NETGEAR JNR1010 Access Control Error Vulnerability

The NETGEAR JNR1010 is a wireless router from NETGEAR. An Access Control Error vulnerability exists in the NETGEAR JNR1010 prior to version 1.0.0.32, which arises from a network system or product that does not properly restrict access to resources from unauthorized roles. No detailed vulnerabilit...