CVE-2020-15037

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st parameter...

Cross site scripting

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st parameter...

CVE-2020-15037

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st parameter...

CVE-2020-15037

The CVE-2020-15037 entry concerns NeDi 1.9C, a web application where an attacker can inject arbitrary JavaScript through the Reports-Devices.php page via the st[] parameter, causing a cross-site scripting (XSS) vulnerability. The consolidated connected documents confirm the vulnerability exists i...

PT-2020-14138

Name of the Vulnerable Software and Affected Versions NeDi version 1.9C Description The issue allows an attacker to execute arbitrary JavaScript code via the "Reports-Devices.php" page st parameter, enabling a cross-site scripting XSS attack. Recommendations For NeDi version 1.9C, as a temporary...

CVE-2020-15037: Improper Neutralization of Input During Web Page Generation

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st parameter...