1711 matches found
CVE-2014-1957: Undefined Security Weakness
FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...
CVE-2014-1955: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1956: Undefined Security Weakness
CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...
Fortinet FortiWeb 5.x < 5.1.0 XSS
The remote host is running FortiWeb 5.x prior to 5.1.0. It is, therefore, affected by a cross-site scripting vulnerability in the web UI due to a failure to sanitize user-supplied input to the 'filter' parameter in the '/user/ldapuser/add' script. An attacker could potentially exploit this...
Fortinet FortiWeb 5.x < 5.0.4 XSS
The remote host is running FortiWeb 5.x prior to 5.0.4. It is, therefore, affected by a cross-site scripting vulnerability in the web UI. An attacker could potentially exploit this vulnerability to execute arbitrary JavaScript in the context of the end-user's browser. %NASLMINLEVEL 70300 C Tenabl...
Fortinet Fortiweb HTML注入漏洞(CVE-2014-1458)
BUGTRAQ ID: 65354 CVECAN ID: CVE-2014-1458 FortiGate系列安全产品可检测和消除网络威胁。 Fortinet Fortiweb 5.0.3及其他版本的Web管理接口存在跨站脚本漏洞，可使经过身份验证的远程管理员注入任意Web脚本或HTML。 0 Fortinet FortiWeb 5.0.3 厂商补丁： Fortinet -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.fortinetfirewall.com/index.php...
FortiWeb Multiple Vulnerabilities
...
CVE-2014-1458
Cross-site scripting XSS vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1458
Cross-site scripting XSS vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1458
CVE-2014-1458 describes a cross-site scripting (XSS) vulnerability in Fortinet FortiWeb’s web administration interface for FortiWeb 5.0.3 and earlier. The weakness allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, with the vulnerability doc...
PT-2014-4193
Name of the Vulnerable Software and Affected Versions FortiGuard FortiWeb versions 5.0.3 and earlier Description A cross-site scripting XSS issue exists in the web administration interface, allowing remote authenticated administrators to inject arbitrary web script or HTML. Recommendations For...
FortiWeb 5.0.3 Cross Site Scripting
I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities in OS of FortiWeb v 5.0.3 CVE-2013-7181 II. BACKGROUND ------------------------- Fortinet's industry-leading, Network Security Platforms deliver Next Generation Firewall NGFW security with exceptional throughput, ultra low...
CVE-2014-1458: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors...
FortiWeb Cross-Site Scripting Vulnerability
...
Fortinet Fortiweb 5.0.3 contains a reflected cross-site scripting vulnerability
Overview Fortinet Fortiweb 5.0.3, and possibly earlier versions, contains a cross-site scripting vulnerability. CWE-79 Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Fortinet Fortiweb 5.0.3, and possibly earlier versions, contains a cross-si...
FortiWeb Stored Cross-Site Scripting Vulnerability
...
FortiGate FortiWeb crossite scripting
Few crossite scripting vulnerabilities...
FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities
Title: ====== FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities Date: ===== 2012-12-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=702 VL-ID: ===== 702 Common Vulnerability Scoring System: ==================================== 2.1 Introduction: =============...