4 matches found
CVE-2018-18882: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface...
PT-2019-9662
Name of the Vulnerable Software and Affected Versions ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module version 1.05 Description A stored cross-site scripting issue was found, allowing an authenticated user to inject arbitrary script via the setup.html page in the we...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...
PT-2014-2611
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/admin main.html; 3 id, 4 val, or 5 arbitrary parameter name QUERY STRING to admin/profil...