6 matches found
CVE-2017-18485
Cognitoys Dino devices allow profilesadd.html CSRF...
5.8CVSS5.6AI score0.0044EPSS
SaveExploits1References1
CVE-2017-18484
Cognitoys Dino devices allow XSS via the SSID...
6.1CVSS6.1AI score0.00826EPSS
SaveExploits1References1
Command injection
Cognitoys Dino devices allow XSS via the SSID...
4.3CVSS6AI score0.00826EPSS
SaveExploits1References1
Cross site request forgery (csrf)
Cognitoys Dino devices allow profilesadd.html CSRF...
5.8CVSS5.7AI score0.0044EPSS
SaveExploits1References1
CVE-2017-18484
Cognitoys Dino devices are affected by CVE-2017-18484, a cross-site scripting (XSS) vulnerability that can be triggered via the SSID. Redhat/CNVD entries attribute the issue to a lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code...
6.1CVSS6AI score0.00826EPSS
SaveExploits1References1Affected Software1
20