CVE-2020-8430

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string...

PT-2020-20133

Name of the Vulnerable Software and Affected Versions Stormshield Network Security 310 version 3.7.10 Description The issue is related to an Open Redirect vulnerability on the captive portal of the affected device. This vulnerability can be exploited by manipulating the rurl parameter in the quer...

CVE-2020-8430: URL Redirection to Untrusted Site

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string...

CVE-2008-0370: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remote attackers to inject arbitrary web script or HTML via the rurl parameter. NOTE: some of these details are obtained from third party information...