3 matches found
Design/Logic Flaw
On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi aka the Keyword field of the URL Blocking Configuration...
4.3CVSS6AI score0.01436EPSS
SaveExploits1References3
CVE-2019-20070
CVE-2019-20070 affects Netis DL4323 devices. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the urlFQDN parameter of form2url.cgi (the Keyword field in URL Blocking Configuration). The root cause, as described in connected sources, is insufficient input validation in the d...
6.1CVSS6AI score0.01436EPSS
SaveExploits1References3Affected Software1
20