Cross site scripting

UNSUPPORTED WHEN ASSIGNED The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only...

CVE-2021-25681

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 706...

CVE-2021-25681

Summary: CVE-2021-25681 affects AdTran Personal Phone Manager 10.8.1. The issue enables exfiltration of data over DNS by using exposed web servers as DNS redirectors to tunnel arbitrary data via DNS. This could allow an attacker to leak information through DNS traffic. Root cause/tech details pro...

CVE-2021-25680

The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be...

CVE-2021-25680

Affected software : AdTran Personal Phone Manager (APPM), with verified impact on v10.8.1 and likely earlier/later versions but only 10.8.1 was confirmed. Vulnerability type : multiple reflected cross-site scripting (XSS) vulnerabilities. Root cause / details : vulnerabilities arise from multiple...

CVE-2021-25679

CVE-2021-25679 affects AdTran Personal Phone Manager (authenticated stored XSS) with confirmed impact on v10.8.1 (and possibly later versions). Verified devices include NetVanta 7060/7100 (End of Life; no patch). Public details across sources (NVD, Exploit-DB, PacketStorm, GitHub repo) describe a...

CVE-2021-25679

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able t...

CVE-2021-25679

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able t...

ADTRAN AdTran-Personal-Phone-Manager-Vulns 跨站脚本漏洞

ADTRAN AdTran-Personal-Phone-Manager-Vulns is an application from ADTRAN USA. A personal phone manager. A cross-site scripting vulnerability exists in ADTRAN AdTran-Personal-Phone-Manager-Vulns, which stems from being affected by multiple reflections of cross-site scripting XSS issues...

ADTRAN AdTran-Personal-Phone-Manager-Vulns 跨站脚本漏洞

ADTRAN AdTran-Personal-Phone-Manager-Vulns is an application from ADTRAN USA. A personal phone manager. A cross-site scripting vulnerability exists in ADTRAN AdTran-Personal-Phone-Manager-Vulns version 10.8.1 and below, which stems from susceptibility to the authentication store cross-site...

PT-2021-16750 · Adtran · Adtran Personal Phone Manager +2

Name of the Vulnerable Software and Affected Versions: AdTran Personal Phone Manager versions 10.8.1 and earlier Description: The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact versions 10.8.1 and below, and...

ADTRAN AdTran-Personal-Phone-Manager-Vulns 安全漏洞

ADTRAN AdTran-Personal-Phone-Manager-Vulns is an application from ADTRAN USA. A personal phone manager. A security vulnerability exists in ADTRAN AdTran-Personal-Phone-Manager-Vulns 10.8.1, which allows data disclosure on DNS...

PT-2021-16749 · Adtran · Adtran Personal Phone Manager +2

Name of the Vulnerable Software and Affected Versions: AdTran Personal Phone Manager versions 10.8.1 and earlier Description: The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issue. This issue impacts versions 10.8.1 and below, and...

Exploit for Cross-site Scripting in Adtran Personal_Phone_Manager

AdTran-Personal-Phone-Manager-Vulns A repository hosting write...

Design/Logic Flaw

An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management NACM allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF...

CVE-2018-19648

An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management NACM allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF...

CVE-2018-19648

An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management NACM allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF...

CVE-2018-19648

An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management NACM allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF...

CVE-2018-19648

The CVE-2018-19648 entry concerns ADTRAN PMAA versions 1.6.2-1, 1.6.3, and 1.6.4. The root cause is a flaw in NETCONF Access Management (NACM) that lets unprivileged users create privileged accounts and run arbitrary commands through the diagnostic-profile over RESTCONF. Impact, per the sources, ...

portal.adtran.com XSS vulnerability

Vulnerable URL: http://portal.adtran.com/web/appmanager/portal/Adtran?nfpb=true&windowLabel=serialNumberSearch2020actionOverride=%2Fportlets%2Fserialnumbersearch%2Fsearch&pageLabel=waverunnerpagesupportwarranty Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS...