FortiOS Web Interface XSS

The vulnerability in the FortiOS operating system’s web interface firewall/schedule/recurrdlg is due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code through the mkey parameter...

PT-2014-2006

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.0.5 Description The issue is caused by insufficient protection of the web page structure in the FortiOS operating system, specifically in the firewall/schedule/recurrdlg component. This allows a remote attacker to inject...

CVE-2013-7182: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attackers to inject arbitrary web script or HTML via the mkey parameter...