Lucene search
+L

4 matches found

osv_cve
osv_cve
•added 2020/07/17 10:15 p.m.•16 views

CVE-2020-5769

Insufficient output sanitization in Teltonika firmware TRB2R00.02.02 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by injecting malicious client-side code into the 'URL/ Host / Connection' form in the 'DATA TO SERVER' configuration section...

5.4CVSS6AI score0.00636EPSS
SaveExploits1References1
Prion
Prion
•added 2020/07/17 10:15 p.m.•29 views

Cross site scripting

Insufficient output sanitization in Teltonika firmware TRB2R00.02.02 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by injecting malicious client-side code into the 'URL/ Host / Connection' form in the 'DATA TO SERVER' configuration section...

3.5CVSS5.2AI score0.00636EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/07/17 12:00 a.m.•5 views

PT-2020-18690

Name of the Vulnerable Software and Affected Versions Teltonika firmware version 00.02.02 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This is achieved by injecting malicious...

5.4CVSS0.00636EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/17 12:00 a.m.•9 views

CVE-2020-5769: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in Teltonika firmware TRB2R00.02.02 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by injecting malicious client-side code into the 'URL/ Host / Connection' form in the 'DATA TO SERVER' configuration section...

5.4CVSS5.7AI score0.00636EPSS
SaveExploits1References2
Rows per page
Query Builder