CVE-2021-38113: Improper Neutralization of Input During Web Page Generation

In addBouquet in js/bqe.js in OpenWebif aka e2openplugin-OpenWebif through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor i.e., bouqueteditor/api/addbouquet?name= leads to Stored XSS...

e2openplugin-OpenWebif 跨站脚本漏洞

OpenWebif is an open source web interface for Enigma2 based set-top boxes. A cross-site scripting vulnerability exists in e2openplugin-OpenWebif versions prior to 1.4.7, which originates from the addBouquet module in js/bqe.js, where insertion of JavaScript into the Bouquet Editor's Add Bouquet...

e2openplugin OpenWebif 1.2.4 Code Execution

Hello all, e2openplugin-OpenWebif is an open source web interface plugin for IP TVs and media centers. It is found in several IP TV software images and hardware products including the commercial Dreambox devices. A remote code injection vulnerability was found in the "key" HTTP GET parameter of t...