CVE-2017-18484

Cognitoys Dino devices allow XSS via the SSID...

CVE-2017-18485

Cognitoys Dino devices allow profilesadd.html CSRF...

Command injection

Cognitoys Dino devices allow XSS via the SSID...

Cross site request forgery (csrf)

Cognitoys Dino devices allow profilesadd.html CSRF...

CVE-2017-18484

Cognitoys Dino devices allow XSS via the SSID...

CVE-2017-18484

Cognitoys Dino devices are affected by CVE-2017-18484, a cross-site scripting (XSS) vulnerability that can be triggered via the SSID. Redhat/CNVD entries attribute the issue to a lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code...

PT-2019-8420

Name of the Vulnerable Software and Affected Versions Cognitoys Dino devices affected versions not specified Description The issue allows for a CSRF attack on the profiles add.html page. Recommendations At the moment, there is no information about a newer version that contains a fix for this...