CVE-2020-18665

Directory Traversal vulnerability in WebPort =1.19.1 in tags of system settings...

CVE-2020-18665

CVE-2020-18665 is a directory-traversal vulnerability in WebPort, affecting versions <= 1.19.1 in the System Settings tags handling. The incident is documented across multiple feeds (NVD summary: WebPort

CVE-2020-18664

Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...

CVE-2020-18664

CVE-2020-18664 details a Cross Site Scripting (XSS) vulnerability in WebPort versions

CVE-2020-18665: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in WebPort =1.19.1 in tags of system settings...

PT-2021-10203

Name of the Vulnerable Software and Affected Versions: WebPort versions 1.19.1 and earlier Description: A Cross Site Scripting XSS issue exists via the connection name parameter in type-conn. This allows for potential malicious script execution. The estimated number of potentially affected device...

CVE-2020-18664: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...

Philips Tasy WebPortal 跨站脚本漏洞

Philips Tasy WebPortal is a Web-based portal system from Philips Europe Philips. A code injection vulnerability exists in WebPort that stems from a cross-site scripting XSS vulnerability in WebPort version 1.19.1 and earlier versions. An attacker could exploit the vulnerability to obtain an...

Moldeo WebPort SQL注入漏洞

Philips Tasy WebPortal is a Web-based portal system from Philips Europe Philips. A code injection vulnerability exists in WebPort, which stems from WebPort version 1.19.1 and earlier versions that can be exploited by an attacker to gain control of the server...

PT-2021-10204

Name of the Vulnerable Software and Affected Versions: WebPort versions prior to 1.19.1 Description: A Directory Traversal issue exists in the system settings tags, allowing potential access to sensitive files. Recommendations: For versions prior to 1.19.1, update to version 1.19.1 or later to...

WebPort 跨站脚本漏洞

WebPort is a remote access and preventive maintenance device. It enables access to control system data and devices. A security vulnerability exists in WebPort =1.19.1 that stems from an xss vulnerability via the connection-name parameter in type-conn...

PT-2021-10206

Name of the Vulnerable Software and Affected Versions: WebPort versions prior to 1.19.1 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the new connection, specifically through the parameter name in type-conn. Recommendations: For versions prior to...

CVE-2020-18668: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerabililty in WebPort =1.19.1 via the description parameter to script/listcalls...

PT-2021-10207

Name of the Vulnerable Software and Affected Versions: WebPort versions prior to 1.19.1 Description: The issue is related to a Cross Site Scripting XSS problem. It can be exploited via the description parameter to script/listcalls. Recommendations: For versions prior to 1.19.1, update to version...

WebPort 系统设置标签路径遍历漏洞

WebPort is a remote access and preventive maintenance device. It enables access to control system data and devices. A path traversal vulnerability exists in the WebPort =1.19.1 System Settings tab...

CVE-2020-18667: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in WebPort =1.19.1 via the new connection, parameter name in type-conn...

CVE-2020-23659

WebPort-v1.19.17121 is affected by Cross Site Scripting XSS on the "connections" feature...

CVE-2020-23659

WebPort-v1.19.17121 is affected by Cross Site Scripting XSS on the "connections" feature...

Cross site scripting

WebPort-v1.19.17121 is affected by Cross Site Scripting XSS on the "connections" feature...

CVE-2020-23659

CVE-2020-23659 affects WebPort v1.19.17121 with a Cross Site Scripting (XSS) flaw in the connections feature. The Red Hat and NVD entries corroborate a web-based XSS condition that could impact users interacting with the affected UI; the core issue is a scripting vulnerability in the connection...