CVE-2022-42974

In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting XSS attack on /file.bootloader.upload.html. The application fails to sanitize the parameter filename, in a POST request to /file.bootloader.upload.html for a system...

CVE-2022-42974

In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting XSS attack on /file.bootloader.upload.html. The application fails to sanitize the parameter filename, in a POST request to /file.bootloader.upload.html for a system...

Kostal PIKO security breach

Kostal PIKO is a series of solar inverter programs from Kostal. A security vulnerability exists in Kostal PIKO that stems from susceptibility to stored cross-site scripting XSS attacks that allow an attacker to inject HTML or JavaScript on a page...

CVE-2022-42974

In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting XSS attack on /file.bootloader.upload.html. The application fails to sanitize the parameter filename, in a POST request to /file.bootloader.upload.html for a system...

CVE-2022-42974

In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting XSS attack on /file.bootloader.upload.html. The application fails to sanitize the parameter filename, in a POST request to /file.bootloader.upload.html for a system...

PT-2024-11656 · Kostal · Kostal Piko 1.5-1 Mp Plus Hmi Oem P

Name of the Vulnerable Software and Affected Versions: Kostal PIKO 1.5-1 MP plus HMI OEM p version 1.0.1 Description: The web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting XSS attack on the API endpoint "/file.bootloader.upload.html". The application fails to...

CVE-2022-42974

Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1 web app is affected by a stored XSS in the API endpoint /file.bootloader.upload.html. The vulnerability arises because the parameter filename is not sanitized in a POST for a system update, allowing injection of HTML/JavaScript that is then stored and lat...

KOSTAL - PIKO Solar App - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application KOSTAL - PIKO Solar App published at the 'play' market has multiple vulnerabilities...