CVE-2017-16723

A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485, and PSI-MODEM/ETH running firmware versions prior to 1.99, 2.20, o...

CVE-2017-16723

A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485, and PSI-MODEM/ETH running firmware versions prior to 1.99, 2.20, o...

CVE-2017-16723

The CVE-2017-16723 issue affects Phoenix Contact FL COMSERVER family and PSI-MODEM/ETH devices (BASIC/UNI/BAS/UNI-T/RS232/RS485) with firmware versions before 1.99, 2.20, or 2.40. Root cause: improper neutralization of input during web page generation (CWE-79), enabling Cross‑Site Scripting that ...

PT-2017-14533

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL COMSERVER BASIC 232/422/485 versions prior to 1.99 PHOENIX CONTACT FL COMSERVER UNI 232/422/485 versions prior to 1.99 PHOENIX CONTACT FL COMSERVER BAS 232/422/485-T versions prior to 1.99 PHOENIX CONTACT FL COMSERVER UNI...

Multiple Phoenix Contact Product Cross-Site Scripting Vulnerabilities

Phoenix Contact FL COMSERVER, serial device server that converts serial signals to Ethernet. PLC I/O module FL COMSERVER UNI 232/422/485, interfaces to Ethernet, supports TCP and UDP. A cross-site scripting vulnerability exists in multiple Phoenix Contact products that stems from a failure to...

CVE-2017-16723: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL COMSERVER UNI 232/422/485, FL COMSERVER BAS 232/422/485-T, FL COMSERVER UNI 232/422/485-T, FL COM SERVER RS232, FL COM SERVER RS485, and PSI-MODEM/ETH running firmware versions prior to 1.99, 2.20, o...

PHOENIX CONTACT FL COMSERVER Detection (HTTP)

Detection of PHOENIX CONTACT FL COMSERVER devices. The script sends a connection request to the server and attempts to detect PHOENIX CONTACT FL COMSERVER devices and to extract its firmware version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

PHOENIX CONTACT FL COMSERVER, FL COM SERVER, and PSI-MODEM/ETH

CVSS v3 8.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: PHOENIX CONTACT Equipment: FL COMSERVER, FL COM SERVER, and PSI-MODEM/ETH Vulnerability: Cross-site Scripting AFFECTED PRODUCTS The following models running firmware versions prior to 1.99, 2.20, or 2.40 of FL...

deepsweep.com XSS vulnerability

Open Bug Bounty ID: OBB-410536 Description| Value ---|--- Affected Website:| deepsweep.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Wallarm to sponsor OWASP AppSec USA

If you are a SecOps or DevOps professional you can not miss the application security event of the year: AppSec USA, September 19–22nd at Disney Coronado Spring Resort, Orlando, FL Use the code: UNLM50WLLRM to register to get $50 discount. You will get great information on the new security tools a...

PT-2018-01: Information Exposure in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected an Information Exposure vulnerability in PHOENIX CONTACT FL SWITCH. An Information Exposure issue in PHOENIX CONTACT FL SWITCH products allows remote unauthenticated attackers to read diagnostic information using Monitor Mode on the...

PT-2017-3434

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products versions 1.0 through 1.32 Description An Information Exposure issue allows a remote unauthenticated attacker to use Monitor Mode on the device to read diagnostic information. The...

ahsfhs.org XSS vulnerability

Vulnerable URL: http://www.ahsfhs.org/Teams2/opponentseach2015.asp?Opponent1=Crestview%20FL=1"...

listings.realbird.com XSS vulnerability

Vulnerable URL: http://listings.realbird.com/Real-Estate/2721-NE-46-Circle/HighSprings/FL/E2S2K5G7/433005.aspx?tab=';alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

leoncountyfl.gov XSS vulnerability

Vulnerable URL: http://www.leoncountyfl.gov/pubworks/transpos/blank.asp?picture=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

citruscountyflcoc.wliinc27.com Open Redirect vulnerability

Vulnerable URL: http://citruscountyflcoc.wliinc27.com/external/wcpages/referral.aspx?ReferralType=W=4816=108=11=0=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:40 GMT Vulnerability type:| Open Redirect Vulnerability...

FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC

No description provided by source. Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be...

FL Studio 10 Producer Edition Buffer Overflow

Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be Vulnerable. Tested On : Windows 7...

FL Studio 10 Producer Edition SEH Based Buffer Overflow PoC

Exploit for windows platform in category dos / poc Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other...

FL Studio 10 Producer Edition - Buffer Overflow (SEH) (PoC)

Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be Vulnerable. Tested On : Windows 7...