Cross site scripting

Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS...

CVE-2020-12262

Intelbras TIP200 (60.61.75.15), TIP200LITE (60.61.75.15) and TIP300 (65.61.75.15) are vulnerable to reflected XSS via the page parameter of /cgi-bin/cgiServer.exx. The underlying issue is a failure to sanitize input in that endpoint, allowing arbitrary JavaScript execution in the user’s browser. ...

CVE-2020-12262

Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS...

CVE-2020-13886

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal...

CVE-2020-13886

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal...

Directory traversal

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal...

CVE-2020-13886

Intelbras TIP 200/200 LITE/300 are affected by a Local File Inclusion vulnerability in /cgi-bin/cgiServer.exx via the page parameter (e.g., page=..%). Unauthenticated attackers can read arbitrary files (notably /etc/passwd), potentially leading to device compromise. Affected models and firmware s...

CVE-2020-13886

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal...

Multiple Intelbras Product Path Traversal Vulnerabilities

Intelbras Intelbras TIP 200 is an IP phone product from Intelbras, Brazil. The device is an IP terminal that supports up to two SIP accounts, with high voice quality HD Voice, LCD 2x15, power PoE Power over Ethernet, etc. Intelbras Intelbras TIP 200 Lite is an IP telephony product from Intelbras,...

PT-2020-13082 · Intelbras · Intelbras Tip 200 Lite +2

Name of the Vulnerable Software and Affected Versions: Intelbras TIP200 version 60.61.75.15 Intelbras TIP200LITE version 60.61.75.15 Intelbras TIP300 version 65.61.75.15 Description: The issue allows for XSS attacks through the /cgi-bin/cgiServer.exx API endpoint, specifically when the page...

PT-2020-13751 · Intelbras · Intelbras Tip 200 Lite +2

Name of the Vulnerable Software and Affected Versions: Intelbras TIP 200 version 60.61.75.15 Intelbras TIP 200 LITE version 60.61.75.15 Intelbras TIP 300 version 65.61.75.22 Description: The issue allows Directory Traversal via the "cgi-bin/cgiServer.exx" endpoint with the page parameter set to...

Cross-Site Scripting Vulnerability in Multiple Intelbras Products

Intelbras TIP 200 and others are products of the Brazilian company Intelbras.Intelbras TIP 200 is an IP phone product.Intelbras TIP 200 Lite is an IP phone product.Intelbras TIP 300 is an IP phone product. A cross-site scripting vulnerability exists in several Intelbras products, which originates...

Intelbras Wireless N Authentication Bypass (CVE-2019-19142)

An authentication bypass vulnerability exists in Intelbras Wireless N. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Intelbras RF1200 Cross-Site Request Forgery Vulnerability

The Intelbras RF1200 is a wireless router from Intelbras Brazil. A cross-site request forgery vulnerability exists in Intelbras RF1200 version 1.1.3. An attacker can exploit this vulnerability to bypass the login.html form...

Intelbras CIP 92200 Cross-Site Request Forgery Vulnerability

Intelbras CIP 92200 is a VoIP switch from Intelbras Poland. A cross-site request forgery vulnerability exists in the Intelbras CIP 92200 that stems from the program failing to properly validate user input. A remote attacker could use this vulnerability to access the panel and perform capture...

CVE-2019-19517

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

CVE-2020-8829

CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis...

CVE-2019-19517

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

Cross site request forgery (csrf)

CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis...

Cross site request forgery (csrf)

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...