Cross site request forgery (csrf)

Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation...

CVE-2014-9382

CVE-2014-9382 affects Freebox OS Web interface 3.0.2. A cross-site request forgery (CSRF) vulnerability allows creating a VPN user without proper authorization. The issue is demonstrated in vendor advisories and security summaries, including a POC that shows a VPN user creation request being trig...

CVE-2014-9382

Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation...

CVE-2014-9382: Cross-Site Request Forgery (CSRF)

Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation...

PT-2020-7772

Name of the Vulnerable Software and Affected Versions: Freebox OS Web interface version 3.0.2 Description: The issue allows for CSRF, which can enable the creation of VPN user accounts. Recommendations: For Freebox OS Web interface version 3.0.2, update to a version that includes a fix for this...

CVE-2014-9405

A Cross-Site Scripting XSS vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code...

Cross site scripting

A Cross-Site Scripting XSS vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code...

CVE-2014-9405

CVE-2014-9405 is an XSS in Freebox OS Web interface 3.0.2. The vulnerability is in the description field of a Download RSS item or Contacts, allowing injected script when a user views the feed or imported VCARD content. Root cause: insufficient input filtering in the web interface; impact describ...

CVE-2014-9405

A Cross-Site Scripting XSS vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code...

PT-2020-7774

Name of the Vulnerable Software and Affected Versions: Freebox OS Web interface version 3.0.2 Description: A Cross-Site Scripting XSS issue exists in the description field of a Download RSS item or Contacts, allowing malicious users to execute arbitrary code. Recommendations: For Freebox OS Web...

CVE-2014-9405: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code...

Freebox OS Web interface cross-site request forgery vulnerability

The Freebox OS Web interface is a web interface for the ADSL modem Freebox operating system. A cross-site request forgery vulnerability exists in the Freebox OS Web interface version 3.0.2. An attacker could exploit this vulnerability by sending a specially crafted request to perform an...

Freebox OS Web interface cross-site scripting vulnerability

The Freebox OS Web interface is a web interface for the ADSL modem Freebox operating system. A cross-site scripting vulnerability exists in version 3.0.2 of the Freebox OS Web interface, which stems from the program not adequately filtering user-submitted input. When a user browses the affected...

Freebox OS Web interface 3.0.2 XSS, CSRF

Hello list, Here are two CVEs I reported to Freebox, a french ISP: - CVE-2014-9382 - CSRF in VPN user account creation - CVE-2014-9405 - XSS Vulnerable product: Freebox OS Web interface 3.0.2. CVE-2014-9382 - CSRF in Freebox OS Web interface 3.0.2 allowing VPN user account creation...

FreeBox 3.0.2 Cross Site Request Forgery / Cross Site Scripting

Hello list, Here are two CVEs I reported to Freebox, a french ISP: - CVE-2014-9382 - CSRF in VPN user account creation - CVE-2014-9405 - XSS Vulnerable product: Freebox OS Web interface 3.0.2. CVE-2014-9382 - CSRF in Freebox OS Web interface 3.0.2 allowing VPN user account creation...