6 matches found
Cross site scripting
Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...
CVE-2017-16843
Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...
CVE-2017-16843
Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...
CVE-2017-16843: Improper Neutralization of Input During Web Page Generation
Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...
PT-2017-14590
Name of the Vulnerable Software and Affected Versions Vonage VDV-23 115 versions 3.2.11-0.9.40 Description The issue concerns stored XSS that can be triggered via the NewKeyword or NewDomain field to the "/goform/RgParentalBasic" API endpoint. Recommendations For Vonage VDV-23 115 versions...
PT-2013-6251
Name of the Vulnerable Software and Affected Versions Cisco Scientific Atlanta DPR2320R2 router version 2.0.2r1262-090417 Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including changing a password via the Password parameter to...