PT-2015-3578

Name of the Vulnerable Software and Affected Versions IPCop aka IPCop Firewall versions prior to 2.1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the QUERY STRING in the cgi-bin/ipinfo.cgi endpoint. This can be used to bypass the cross-site request...

CVE-2013-7417: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/ipinfo.cgi in IPCop aka IPCop Firewall before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING. NOTE: this can be used to bypass the cross-site request forgery CSRF protection mechanism by setting the Refere...

PT-2014-2197

Name of the Vulnerable Software and Affected Versions Smoothwall Express versions 3.0 SP3 and earlier, Smoothwall Express version 3.1 Description A cross-site scripting XSS issue exists in the web management interface, specifically in the httpd/cgi-bin/ipinfo.cgi file. This allows remote attacker...

CVE-2011-5283: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to inject arbitrary web script or HTML via the IP parameter in a Run action...