3 matches found
EUVD-2018-11599
Malware in sbrugna...
4.8CVSS5.7AI score0.00604EPSS
SaveExploits1References2
Cross site scripting
Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zFormsavechanges sipnick parameter. The password of alphaadmin for the admin account may be used for authentication in some cases...
3.5CVSS5AI score0.00604EPSS
SaveExploits1References1Affected Software1
CVE-2018-19927: Improper Neutralization of Input During Web Page Generation
Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zFormsavechanges sipnick parameter. The password of alphaadmin for the admin account may be used for authentication in some cases...
4.8CVSS5.9AI score0.00604EPSS
SaveExploits1References2
20