ASUSTOR SoundsGood Application Cross-Site Scripting Vulnerability

SUSTOR SoundsGood is a web-based audio/video playback application from ASUSTOR for use on ASUSTOR NAS storage systems. A cross-site scripting vulnerability exists in the playlistmanger.cgi file in the ASUSTOR SoundsGood application. A remote attacker can exploit the vulnerability by injecting...

Cross site scripting

A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payloads via the 'playlist' POST parameter...

CVE-2018-11343

ASUSTOR SoundsGood's playlistmanger.cgi is vulnerable to persistent XSS via the playlist POST parameter. The cited CNVD entry states a remote attacker can inject arbitrary script/HTML and notes the payload could potentially lead to obtaining a valid SID value. The vulnerability details (affected ...

PT-2018-10501

Name of the Vulnerable Software and Affected Versions ASUSTOR SoundsGood affected versions not specified Description A persistent cross-site scripting issue in the playlistmanger.cgi component of the ASUSTOR SoundsGood application allows attackers to store cross-site scripting payloads via the...

CVE-2018-11343: Improper Neutralization of Input During Web Page Generation

A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payloads via the 'playlist' POST parameter...