EUVD-2017-6744

Malware in sbrugna...

Dream Multimedia Dreambox Device BouquetEditor WebPlugin Cross-Site Scripting Vulnerability

Dream Multimedia Dreambox devices is a Linux-based digital TV set-top box produced by Dream Multimedia, Germany.BouquetEditor WebPlugin is one of the plug-ins with channel naming, sorting and other functions. A cross-site scripting vulnerability exists in the BouquetEditor WebPlugin in Dream...

CVE-2017-15287

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI...

CVE-2017-15287: Improper Neutralization of Input During Web Page Generation

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI...

PT-2017-13969

Name of the Vulnerable Software and Affected Versions Dreambox devices affected versions not specified Description The issue concerns a cross-site scripting XSS problem in the BouquetEditor WebPlugin. Specifically, it affects the "Name des Bouquets" field and the file parameter to the "/file" URI...