Lucene search
K

9 matches found

CNVD
CNVD
added 2017/07/25 12:0 a.m.1 views

Green Packet DX-350 Cross-Site Scripting Vulnerability

The Green Packet DX-350 is a network access point device from Green Packet USA. A cross-site scripting vulnerability exists in the Green Packet DX-350 using firmware version 2.8.9.5-g1.4.8-atheeb. A remote attacker can exploit the vulnerability by sending the 'action' parameter to the ajax.cgi fi...

6.1CVSS6AI score0.0024EPSS
Exploits1References1
Prion
Prion
added 2017/07/21 6:29 a.m.12 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP...

6.8CVSS7.2AI score0.00138EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2017/07/21 6:29 a.m.0 views

CVE-2017-9930

Cross-Site Request Forgery CSRF exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP...

8.8CVSS5.8AI score0.00138EPSS
Exploits1References1
NVD
NVD
added 2017/07/21 6:29 a.m.11 views

CVE-2017-9930

Cross-Site Request Forgery CSRF exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP...

8.8CVSS8.8AI score0.00138EPSS
Exploits1References1
OSV
OSV
added 2017/07/21 6:29 a.m.0 views

CVE-2017-9931

Cross-Site Scripting XSS exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by the action parameter to ajax.cgi...

6.1CVSS5.8AI score0.0024EPSS
Exploits1References1
Cvelist
Cvelist
added 2017/07/21 6:0 a.m.12 views

CVE-2017-9930

Cross-Site Request Forgery CSRF exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP...

8.8AI score0.00138EPSS
Exploits1References1
CVE
CVE
added 2017/07/21 6:0 a.m.37 views

CVE-2017-9931

Green Packet DX-350 firmware v2.8.9.5-g1.4.8-atheeb contains a cross-site scripting (XSS) vulnerability. The flaw is triggered by the action parameter to ajax.cgi, enabling injection of arbitrary web script or HTML in the affected device.

6.1CVSS5.9AI score0.0024EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2013/07/02 3:43 a.m.13 views

CVE-2013-3581

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax 1 wmxState or 2 netState request...

7.1CVSS6.1AI score0.00354EPSS
Exploits0References1
CVE
CVE
added 2013/06/29 8:0 p.m.44 views

CVE-2013-3581

The CVE-2013-3581 entry affects the web interface of the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem. The vulnerability lies in ajax.cgi where remote attackers can obtain sensitive information via Ajax requests (wmxState or netState). The provided documents describe the affected compon...

7.1CVSS6.3AI score0.00354EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder