CVE-2024-34582

Sunhillo SureLine (versions through 8.10.0 ) on RICI 5000 devices is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw within the "Forgot Password" feature. The root cause is the improper neutralization of the userid_change parameter in the /cgi/usrPasswd.cgi endpoint, where the input is ...