2 matches found
CVE-2014-9405
A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.
CVE-2014-9382
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation