548 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to guipartA/...
CVE-2014-0331
Cross-site scripting XSS vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to guipartA/...
CVE-2014-0331
Fortinet FortiADC D-series (3.2.0, possibly earlier) contains a cross-site scripting (XSS) vulnerability in the web interface. The issue stems from the locale parameter in /FortiADC/gui_partA/ failing to neutralize input, allowing a remote attacker to inject script/HTML in the victim’s browser co...
Fortinet FortiADC 'locale'参数跨站脚本漏洞
Bugtraq ID:66642 CVE ID:CVE-2014-0331 Fortinet FortiADC是一款应用交付控制器。 通过"locale" GET参数传递给/FortiADC/guipartA/的输入在返回用户之前缺少过滤，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Fortinet FortiADC 3.2.0 Fortinet FortiADC 3.2.1版本已经修复漏洞，建议用户下载使用： http://www.fortiguard.com/...
CVE-2014-0331: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to guipartA/...
PT-2014-3564
Name of the Vulnerable Software and Affected Versions FortiADC versions prior to 3.2.1 Description A cross-site scripting XSS issue exists in the web administration interface, allowing remote attackers to inject arbitrary web script or HTML via the locale parameter to the "gui partA/" endpoint...
FortiADC 3.2 Cross Site Scripting
I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities in OS of FortiADC v3.2 II. BACKGROUND ------------------------- Fortinet's industry-leading, Network Security Platforms deliver Next Generation Firewall NGFW security with exceptional throughput, ultra low latency, and...
