CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

CVE-2019-7419

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

CVE-2019-7421

CVE-2019-7421 affects Samsung X7400GX SyncThru Web Service (Firmware V6.A6.25, Main Firmware V11.01.05.25_08-21-2015). The vulnerability is a cross-site scripting flaw in the web interface, with the XSS vector disclosed in multiple parameters of /sws.login/gnb/loginView.sws (contextpath and based...

CVE-2019-7420

CVE-2019-7420 affects SAMSUNG X7400GX SyncThru Web Service (Firmware V6.A6.25, Main V11.01.05.25_08-21-2015). The vulnerability is a Cross-Site Scripting (XSS) in the web UI, exposed via the tabName parameter of /sws.application/information/networkinformationView.sws (per the NVD entry). This ind...

CVE-2019-7420

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

CVE-2019-7419

CVE-2019-7419 affects Samsung SAMSUNG X7400GX SyncThru Web Service (Firmware V6.A6.25, Main V11.01.05.25_08-21-2015). The vulnerability is a Cross-Site Scripting (XSS) in /sws/leftmenu.sws affecting parameters ruiFw_id, ruiFw_pid, and ruiFw_title. Root cause is XSS, enabling script injection in t...

CVE-2019-7419

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7418

The CVE-2019-7418 entry concerns a cross-site scripting (XSS) vulnerability in Samsung X7400GX SyncThru Web Service. The affected component is the web interface (/sws/swsAlert.sws) of Samsung X7400GX SyncThru Web Service firmware version V6.A6.25 / V11.01.05.25_08-21-2015. The root cause is refle...

CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

PT-2019-18592

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description A security issue exists in the SyncThru Web Service, where an XSS issue is present in the "/sws/swsAlert.sws" endpoint, affecting multiple parameters:...

PT-2019-18593

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description The issue exists in the "/sws/leftmenu.sws" endpoint, where multiple parameters are vulnerable: ruiFw id, ruiFw pid, ruiFw title. This allows for potenti...

CVE-2019-7419: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7421: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL...

CVE-2019-7418: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

PT-2019-18595

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description A security issue exists in the SyncThru Web Service, where an XSS attack can be performed. This issue is related to the "/sws.login/gnb/loginView.sws"...

PT-2019-18594

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description The issue exists in the "/sws.application/information/networkinformationView.sws" endpoint, specifically in the tabName parameter, allowing for XSS...