CVE-2024-36494

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The login page at /cgi/slogin.cgi suffers from XSS due to improper input filtering of the -tsetup+-uuser parameter, which can only be exploited if th...

CVE-2024-36494

The software Image Access Scan2Net (versions 7.40 and earlier , 7.42 and earlier , and 7.42B and earlier ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is missing input sanitization and improper input filtering of the -tsetup+-uuser parameter on the /cgi/slogin.cgi login...