CVE-2020-15017: Improper Neutralization of Input During Web Page Generation

NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the sta GET parameter...

PT-2020-14122

Name of the Vulnerable Software and Affected Versions NeDi version 1.9C Description The issue concerns reflected cross-site scripting. Specifically, the Devices-Config.php file fails to properly validate user input, allowing an attacker to craft arbitrary JavaScript in the sta GET parameter. This...