10 matches found
CVE-2019-20076
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter DynDns settings of the Dynamic DNS Configuration...
CVE-2019-20072
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...
CVE-2019-20076
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter DynDns settings of the Dynamic DNS Configuration...
Design/Logic Flaw
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter DynDns settings of the Dynamic DNS Configuration...
CVE-2019-20076
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter DynDns settings of the Dynamic DNS Configuration...
CVE-2019-20076
CVE-2019-20076 concerns the Netis DL4323 modem, where a stored/reflected cross-site scripting (XSS) vulnerability exists in the DynDns settings page due to the username parameter in form2Ddns.cgi. The issue stems from insufficient input validation in the WEB application, enabling an attacker to i...
PT-2019-16081
Name of the Vulnerable Software and Affected Versions Netis DL4323 affected versions not specified Description The issue exists due to a cross-site scripting XSS flaw. Specifically, the username parameter in the form2Ddns.cgi endpoint, which is part of the Dynamic DNS Configuration settings, is...
CVE-2019-20072: Improper Neutralization of Input During Web Page Generation
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...
CVE-2019-20076: Improper Neutralization of Input During Web Page Generation
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter DynDns settings of the Dynamic DNS Configuration...
PT-2019-16077
Name of the Vulnerable Software and Affected Versions Netis DL4323 affected versions not specified Description The issue exists due to a problem with the hostname parameter in the "form2Ddns.cgi" script, which is part of the Dynamic DNS Configuration. This allows for XSS attacks. Recommendations...