CVE-2020-7236

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...

UHP UHP-100 cross-site scripting vulnerability (CNVD-2020-07243)

The UHP-100 is a high-performance router designed for large-scale deployment in broadband VSAT networks. A cross-site scripting vulnerability exists in UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3. The vulnerability stems from a lack of proper validation of client data by the WEB application. An attacker...

CVE-2020-7235

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

CVE-2020-7235

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

CVE-2020-7236

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...

Design/Logic Flaw

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

Stack overflow

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...

CVE-2020-7236

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...

CVE-2020-7235

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

CVE-2020-7236

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...

CVE-2020-7236

The CVE-2020-7236 issue affects UHP UHP-100 devices with firmware versions 3.4.1.15, 3.4.2.4, and 3.4.3, where a Cross-Site Scripting (XSS) vulnerability exists in the WEB application. The root cause is insufficient validation of client-side data in the Site Setup section’s Site Name field (cw2?t...

UHP UHP-100 Cross-Site Scripting Vulnerability

The UHP-100 is a high-performance router designed for large-scale deployment in broadband VSAT networks. A cross-site scripting vulnerability exists in the UHP UHP-100 versions 3.4.1.15, 3.4.2.4, and 3.4.3. The vulnerability stems from the lack of proper validation of client-side data by the WEB...

PT-2020-19486

Name of the Vulnerable Software and Affected Versions UHP UHP-100 versions 3.4.1.15, 3.4.2.4, and 3.4.3 Description The issue allows for XSS via the cw2?td= parameter in the Site Name field of the Site Setup section. Recommendations For versions 3.4.1.15, 3.4.2.4, and 3.4.3, avoid using the cw2?t...

CVE-2020-7236: Improper Neutralization of Input During Web Page Generation

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...

CVE-2020-7235: Improper Neutralization of Input During Web Page Generation

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

PT-2020-19485

Name of the Vulnerable Software and Affected Versions UHP UHP-100 versions 3.4.1.15, 3.4.2.4, and 3.4.3 Description The issue allows for XSS via the cB3?ta= parameter, which is related to the profile title. Recommendations For versions 3.4.1.15, 3.4.2.4, and 3.4.3, consider restricting access to...