Cross site request forgery (csrf)

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

CVE-2017-14267

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

CVE-2017-14267: Cross-Site Request Forgery (CSRF)

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

PT-2017-13334

Name of the Vulnerable Software and Affected Versions EE 4GEE WiFi MBB versions before EE60 00 05.00 31 Description The issue is related to Cross-Site Request Forgery CSRF and is associated with several API endpoints, including "goform/AddNewProfile", "goform/setWanDisconnect",...

PT-2017-4187

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.6.3-267 Description The issue exists due to insufficient input validation in the goform/formEMR30 component of the Symantec Messaging Gateway. This can allow a remote attacker to elevate their...

CVE-2017-11648

Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering...

CVE-2017-11648: Cross-Site Request Forgery (CSRF)

Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering...

PT-2017-12147

Name of the Vulnerable Software and Affected Versions Techroutes TR 1803-3G Wireless Cellular Router/Modem version 2.4.25 Description The issue concerns a lack of protection against a specific type of attack, as demonstrated by a request to "goform/BasicSettings" to disable port filtering. This...

Multiple Jensen of Scandinavia Air:Link Command Execution Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. A command execution vulnerability exists in the /goform/ page of multiple Jensen of Scandinavia Air:Link products. A remote attacker could use this vulnerability to submit special shell metacharacters to...

Multiple Jensen of Scandinavia Air:Link Cross-Site Request Forgery Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. A cross-site request forgery in vulnerability exists in multiple Jensen of Scandinavia Air:Link products/goform/ pages. This allows remote attackers to construct malicious URIs and trick users into...

Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...

Multiple Jensen of Scandinavia Air:Link 'return-url' parameter open redirect vulnerability

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'return-url' parameter on the /goform/formLogout page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a maliciou...

CVE-2016-10313

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

CVE-2016-10312

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

Cross site request forgery (csrf)

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

Code injection

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

CVE-2016-10312

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

CVE-2016-10313: Cross-Site Request Forgery (CSRF)

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

CVE-2016-10312: Improper Neutralization of Special Elements used in a Command

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...