CVE-2024-34582

Sunhillo SureLine (versions through 8.10.0 ) on RICI 5000 devices is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw within the "Forgot Password" feature. The root cause is the improper neutralization of the userid_change parameter in the /cgi/usrPasswd.cgi endpoint, where the input is ...

CVE-2024-34582: Improper Neutralization of Input During Web Page Generation

Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi useridchange XSS within the Forgot Password feature...