777 matches found
CVE-2019-20072
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...
CVE-2019-20070
On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi aka the Keyword field of the URL Blocking Configuration...
CVE-2019-20073
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...
CVE-2019-20075
On Netis DL4323 devices, pingrttv6.html has XSS Ping6 Diagnostic...
Design/Logic Flaw
On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi aka the Keyword field of the URL Blocking Configuration...
Default credentials
On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page...
Design/Logic Flaw
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter DynDns settings of the Dynamic DNS Configuration...
Cross site request forgery (csrf)
On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs...
Design/Logic Flaw
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...
Design/Logic Flaw
On Netis DL4323 devices, pingrttv6.html has XSS Ping6 Diagnostic...
Netis DL4323 Cross-Site Request Forgery Vulnerability
NETCORE Netis DL4323 is a multi-function modem from China's NETCORE. A cross-site request forgery vulnerability exists in the NETCORE Netis DL4323. The vulnerability arises from a WEB application that does not adequately verify that a request is from a trusted user. An attacker could exploit this...
Netis DL4323 Cross-Site Scripting Vulnerability (CNVD-2020-02549)
NETCORE Netis DL4323 is a multi-function modem from China's NETCORE. A cross-site scripting vulnerability exists in the pingrttv6.html page in the NETCORE Netis DL4323. The vulnerability stems from the WEB application lacking proper validation of client data. An attacker can exploit the...
CVE-2019-20070
On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi aka the Keyword field of the URL Blocking Configuration...
CVE-2019-20070
CVE-2019-20070 affects Netis DL4323 devices. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the urlFQDN parameter of form2url.cgi (the Keyword field in URL Blocking Configuration). The root cause, as described in connected sources, is insufficient input validation in the d...
CVE-2019-20071
On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs...
CVE-2019-20071
CVE-2019-20071 affects Netis DL4323 devices. The issue is a cross-site request forgery (CSRF) vulnerability in the web interface, specifically via the form2logaction.cgi endpoint, which can be abused to delete all logs. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE li...
CVE-2019-20072
CVE-2019-20072 corresponds to a cross-site scripting vulnerability in Netis DL4323 devices, exploitable via the hostname parameter in form2Ddns.cgi used for Dynamic DNS configuration. The issue stems from insufficient input validation in the web application, enabling execution of arbitrary client...
CVE-2019-20072
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...
CVE-2019-20073
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...
CVE-2019-20073
CVE-2019-20073 affects Netis DL4323 devices and is described as a Cross-Site Scripting (XSS) vulnerability via the form2userconfig.cgi username parameter in User Account Configuration. The root cause cited is lack of proper validation of client data by the WEB application. The connected records c...