Lucene search
K

6 matches found

OSV
OSV
added 2026/02/19 1:16 p.m.1 views

CVE-2019-25407

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup schedule interface. Attackers can send POST requests to the backupschedule endpoint with JavaScript code in the BACKUPRCPT...

5.1CVSS6AI score0.00016EPSS
Exploits1References4
NVD
NVD
added 2026/02/19 1:16 p.m.3 views

CVE-2019-25407

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup schedule interface. Attackers can send POST requests to the backupschedule endpoint with JavaScript code in the BACKUPRCPT...

6.1CVSS0.00016EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/02/19 12:2 p.m.21 views

CVE-2019-25407 Comodo Dome Firewall 2.7.0 Cross-Site Scripting via backupschedule

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup schedule interface. Attackers can send POST requests to the backupschedule endpoint with JavaScript code in the BACKUPRCPT...

6.1CVSS0.00016EPSS
Exploits1References4
CVE
CVE
added 2026/02/19 12:2 p.m.8 views

CVE-2019-25407

CVE-2019-25407 concerns Comodo Dome Firewall 2.7.0, where a reflected cross-site scripting vulnerability exists in the backupschedule interface. The issue allows an attacker to submit crafted input via POST to the backupschedule endpoint (BACKUP_RCPTTO) to execute arbitrary JavaScript in end user...

6.1CVSS5.7AI score0.00016EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.3 views

Comodo Dome Firewall 跨站脚本漏洞

Comodo Dome Firewall is a unified threat management and next-generation firewall provided by the Chinese company Comodo. Version 2.7.0 of Comodo Dome Firewall contains a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of the BACKUPRCPTTO parameter input in the...

6.1CVSS5.6AI score0.00016EPSS
Exploits1References4
OSV
OSV
added 2021/06/01 2:15 p.m.0 views

CVE-2021-24322

The Database Backup for WordPress plugin before 2.4 did not escape the backuprecipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue...

5.4CVSS5.8AI score
Exploits0References2
Rows per page
Query Builder