EUVD-2017-8017

Malware in sbrugna...

CVE-2017-16843

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

CVE-2017-16843

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

CVE-2017-16843

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

CVE-2017-16843

The CVE concerns the Vonage VDV-23 115 router (software version 3.2.11-0.9.40) which exposes a stored XSS in the web UI via the NewKeyword or NewDomain fields sent to /goform/RgParentalBasic. The issue is triggered when untrusted input is injected into these fields, leading to arbitrary script/HT...

CVE-2017-16843: Improper Neutralization of Input During Web Page Generation

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

PT-2017-14590

Name of the Vulnerable Software and Affected Versions Vonage VDV-23 115 versions 3.2.11-0.9.40 Description The issue concerns stored XSS that can be triggered via the NewKeyword or NewDomain field to the "/goform/RgParentalBasic" API endpoint. Recommendations For Vonage VDV-23 115 versions...