EUVD-2018-11599

Malware in sbrugna...

EUVD-2018-11598

Malware in sbrugna...

CVE-2018-19927

Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zFormsavechanges sipnick parameter. The password of alphaadmin for the admin account may be used for authentication in some cases...

CVE-2018-19926

Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATHINFO...

CVE-2018-19926

Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATHINFO...

Cross site scripting

Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATHINFO...

Cross site scripting

Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zFormsavechanges sipnick parameter. The password of alphaadmin for the admin account may be used for authentication in some cases...

CVE-2018-19927

Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zFormsavechanges sipnick parameter. The password of alphaadmin for the admin account may be used for authentication in some cases...

CVE-2018-19927

Zenitel Norway IP-StationWeb before 4.2.3.9 is affected by a stored XSS vulnerability in the Display Name fields for Station Status or Account Settings, triggered via the goform/zForm_save_changes sip_nick parameter. The issue can be compounded by the potential use of the admin account password (...

CVE-2018-19926

Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATHINFO...

PT-2018-15171

Name of the Vulnerable Software and Affected Versions Zenitel Norway IP-StationWeb versions prior to 4.2.3.9 Description The issue allows for stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zForm save changes sip nick parameter. In some cases, the...

CVE-2018-19927: Improper Neutralization of Input During Web Page Generation

Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zFormsavechanges sipnick parameter. The password of alphaadmin for the admin account may be used for authentication in some cases...

CVE-2018-19926: Improper Neutralization of Input During Web Page Generation

Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATHINFO...

PT-2018-15170

Name of the Vulnerable Software and Affected Versions Zenitel Norway IP-StationWeb versions prior to 4.2.3.9 Description The issue allows for reflected XSS via the goform/ API endpoint, specifically through the PATH INFO. Recommendations For versions prior to 4.2.3.9, update to version 4.2.3.9 or...