Adtran Personal Phone Manager 10.8.1 Persistent Cross Site Scripting

Exploit Title: Adtran Personal Phone Manager 10.8.1 - 'emailAddress' Stored Cross-Site Scripting XSS Date: 1/21/2021 Exploit Author: 3ndG4me Vendor Homepage: https://adtran.com/web/page/portal/Adtran/wphome Version: v10.8.1 Tested on: NetVanta 7060 and NetVanta 7100 CVE : CVE-2021-25679...

Adtran Personal Phone Manager 10.8.1 - (Multiple) Reflected Cross-Site Scripting Vulnerability

Exploit Title: Adtran Personal Phone Manager 10.8.1 - 'Multiple' Reflected Cross-Site Scripting XSS Exploit Author: 3ndG4me Vendor Homepage: https://adtran.com/web/page/portal/Adtran/wphome Version: v10.8.1 Tested on: NetVanta 7060 and NetVanta 7100 CVE : CVE-2021-25680 CVE-2021-25680 - Adtran...

CVE-2021-25679

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able t...

CVE-2021-25680

The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be...

CVE-2021-25681

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 706...

CVE-2021-25679

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able t...

CVE-2021-25680

The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only...

CVE-2021-25681

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 706...

CVE-2021-25681

Summary: CVE-2021-25681 affects AdTran Personal Phone Manager 10.8.1. The issue enables exfiltration of data over DNS by using exposed web servers as DNS redirectors to tunnel arbitrary data via DNS. This could allow an attacker to leak information through DNS traffic. Root cause/tech details pro...

CVE-2021-25680

The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be...

CVE-2021-25680

Affected software : AdTran Personal Phone Manager (APPM), with verified impact on v10.8.1 and likely earlier/later versions but only 10.8.1 was confirmed. Vulnerability type : multiple reflected cross-site scripting (XSS) vulnerabilities. Root cause / details : vulnerabilities arise from multiple...

CVE-2021-25679

CVE-2021-25679 affects AdTran Personal Phone Manager (authenticated stored XSS) with confirmed impact on v10.8.1 (and possibly later versions). Verified devices include NetVanta 7060/7100 (End of Life; no patch). Public details across sources (NVD, Exploit-DB, PacketStorm, GitHub repo) describe a...

CVE-2021-25679

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able t...

ADTRAN AdTran-Personal-Phone-Manager-Vulns 跨站脚本漏洞

ADTRAN AdTran-Personal-Phone-Manager-Vulns is an application from ADTRAN USA. A personal phone manager. A cross-site scripting vulnerability exists in ADTRAN AdTran-Personal-Phone-Manager-Vulns, which stems from being affected by multiple reflections of cross-site scripting XSS issues...

ADTRAN AdTran-Personal-Phone-Manager-Vulns 跨站脚本漏洞

ADTRAN AdTran-Personal-Phone-Manager-Vulns is an application from ADTRAN USA. A personal phone manager. A cross-site scripting vulnerability exists in ADTRAN AdTran-Personal-Phone-Manager-Vulns version 10.8.1 and below, which stems from susceptibility to the authentication store cross-site...

ADTRAN AdTran-Personal-Phone-Manager-Vulns 安全漏洞

ADTRAN AdTran-Personal-Phone-Manager-Vulns is an application from ADTRAN USA. A personal phone manager. A security vulnerability exists in ADTRAN AdTran-Personal-Phone-Manager-Vulns 10.8.1, which allows data disclosure on DNS...

PT-2021-16750 · Adtran · Adtran Personal Phone Manager +2

Name of the Vulnerable Software and Affected Versions: AdTran Personal Phone Manager versions 10.8.1 and earlier Description: The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact versions 10.8.1 and below, and...

PT-2021-16751

Name of the Vulnerable Software and Affected Versions AdTran Personal Phone Manager version 10.8.1 Description The issue allows for exfiltration of data over DNS, potentially enabling exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS...