CVE-2019-17523

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp...

Cross site scripting

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp...

PT-2019-15183

Name of the Vulnerable Software and Affected Versions Technicolor TC7300 version STFA.51.20 Description The issue allows remote attackers to inject arbitrary web script via the FileName parameter to the "/FTPDiag.asp" API endpoint. Recommendations For Technicolor TC7300 version STFA.51.20, avoid...

CVE-2019-17523: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp...