EUVD-2019-16960

Malware in sbrugna...

CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

CVE-2019-7420

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

CVE-2019-7419

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

Cross site scripting

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

CVE-2019-7420

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

CVE-2019-7419

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7418

The CVE-2019-7418 entry concerns a cross-site scripting (XSS) vulnerability in Samsung X7400GX SyncThru Web Service. The affected component is the web interface (/sws/swsAlert.sws) of Samsung X7400GX SyncThru Web Service firmware version V6.A6.25 / V11.01.05.25_08-21-2015. The root cause is refle...

CVE-2019-7418

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

PT-2019-18592

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description A security issue exists in the SyncThru Web Service, where an XSS issue is present in the "/sws/swsAlert.sws" endpoint, affecting multiple parameters:...

PT-2019-18593

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description The issue exists in the "/sws/leftmenu.sws" endpoint, where multiple parameters are vulnerable: ruiFw id, ruiFw pid, ruiFw title. This allows for potenti...

PT-2019-18595

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description A security issue exists in the SyncThru Web Service, where an XSS attack can be performed. This issue is related to the "/sws.login/gnb/loginView.sws"...

CVE-2019-7419: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFwid, ruiFwpid, ruiFwtitle...

CVE-2019-7420: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

PT-2019-18594

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description The issue exists in the "/sws.application/information/networkinformationView.sws" endpoint, specifically in the tabName parameter, allowing for XSS...

CVE-2019-7418: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

CVE-2019-7421: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL...

SAMSUNG X7400GX Sync Thru Web Cross Site Scripting

alertXSS.XSSproxy.org URL http://X.X.X.X/sws/swsAlert.sws?popupid=%3CSCRIPT%3Ealert%22XSS%22;%3C/SCRIPT%3E&type=alert&bullet=suc&func=&Nfunc=closePopup'successMsg ','',''&flag=bob@%3CSCRipt%3EalertXSS%3C/scrIPT%3E.XSSproxy.org &frame=&msg=The%20requested%20reports%20will%20be%20printed Parameter...