CVE-2020-12132

Fifthplay S.A.M.I before 2019.3HP2 allows unauthenticated stored XSS via a POST request...

EUVD-2020-4447

Malware in sbrugna...

CVE-2020-12132

Fifthplay S.A.M.I before 2019.3HP2 allows unauthenticated stored XSS via a POST request...

CVE-2020-12132

Fifthplay S.A.M.I before 2019.3HP2 allows unauthenticated stored XSS via a POST request...

Cross site scripting

Fifthplay S.A.M.I before 2019.3HP2 allows unauthenticated stored XSS via a POST request...

Fifthplay S.A.M.I Cross-Site Scripting Vulnerability

Fifthplay S.A.M.I is a management interface used in Fifthplay products from Fifthplay Belgium. A cross-site scripting vulnerability exists in versions prior to Fifthplay S.A.M.I 2019.3HP2. The vulnerability stems from the WEB application lacking proper validation of client data. An attacker can...

CVE-2020-12132

Fifthplay S.A.M.I before 2019.3HP2 allows unauthenticated stored XSS via a POST request...

CVE-2020-12132

The CVE-2020-12132 entry describes an unauthenticated stored XSS in Fifthplay S.A.M.I (Service And Management Interface) prior to 2019.3_HP2. A POST request can inject HTML/JS that is reflected to users, enabling client-side script execution in affected sessions. Affected platforms include Platfo...

Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Fifthplay S.A.M.I 2019.2HP - Persistent Cross-Site Scripting Exploit Author: LiquidWorm Vendor: Fifthplay NV Vendor Homepage: https://www.fifthplay.com Version: 2019.2HP Tested on: Linux CVE : - Fifthplay S.A.M.I - Service...

Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting

Fifthplay S.A.M.I 2019.2HP - Persistent Cross-Site Scripting Exploit Title: Fifthplay S.A.M.I 2019.2HP - Persistent Cross-Site Scripting Date: 2020-01-29 Exploit Author: LiquidWorm Vendor: Fifthplay NV Vendor Homepage: https://www.fifthplay.com Version: 2019.2HP Tested on: Linux CVE : - Fifthplay...

Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting

Exploit Title: Fifthplay S.A.M.I 2019.2HP - Persistent Cross-Site Scripting Date: 2020-01-29 Exploit Author: LiquidWorm Vendor: Fifthplay NV Vendor Homepage: https://www.fifthplay.com Version: 2019.2HP Tested on: Linux CVE : - Fifthplay S.A.M.I - Service And Management Interface Unauthenticated...

Fifthplay S.A.M.I Cross Site Request Forgery / Cross Site Scripting

Fifthplay S.A.M.I - Service And Management Interface Unauthenticated Stored XSS Vendor: Fifthplay NV Product web page: https://www.fifthplay.com Affected version: Platform: HAM V1.2 HAM V1.1 HAM V1.0 DINHAM 10W Image Version: 2019.3-20190605144803 2019.2HP-20190808154634 2018.4HP-20181015152950...

Fifthplay S.A.M.I - Service And Management Interface Unauthenticated Stored XSS

Summary Fifthplay is a Belgian high-tech player and a subsidiary of Niko Group. We specialise in enriching smart homes and buildings for almost 10 years, and in services that provide comfort and energy. Our gateway provides a modular approach to integrating old and new technologies, such as smart...