Mediatrix 4402 Web Management Interface 'login' Page Cross Site Scripting Vulnerability

Mediatrix 4402 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mediatrix 4402 digital gateway web interface contains a cross-site scripting (XSS) vulnerability

Overview Mediatrix's web management interface for the 4402 digital gateway device with firmware version Dgw 1.1.13.186, and possibly earlier versions, contains a cross-site scripting XSS vulnerability. CWE-79 Description CWE-79: Improper Neutralization of Input During Web Page Generation...

CVE-2014-1612

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2014-1612

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2014-1612

CVE-2014-1612 affects Media5 Mediatrix 4402 Web Management Interface (login.esp). The vulnerability is a reflected cross-site scripting (XSS) in the username parameter on the login page, allowing remote attackers to inject scripts. Affected firmware includes Dgw 1.1.13.186 and earlier. Exploitati...

CVE-2014-1612: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

PT-2014-4257

Name of the Vulnerable Software and Affected Versions Media5 Mediatrix 4402 VoIP Gateway versions Dgw 1.1.13.186 and earlier Description A cross-site scripting issue exists in the Web Management Interface, specifically in login.esp, allowing remote attackers to inject arbitrary web script or HTML...