CVE-2023-39575

CVE-2023-39575 affects ISL ARP Guard v4.0.2. A reflected cross-site scripting (XSS) vulnerability exists in the url_str URL parameter, allowing an attacker to execute arbitrary web scripts or HTML in the victim’s browser via a crafted payload. Documented impact per NVD shows a Medium severity (CV...

CVE-2019-18663

CVE-2019-18663 affects ARP-GUARD 4.0.0-5. The connected CNVD/NVD records describe a SQL injection vulnerability in the /login/forgot1 POST endpoint, exploitable by an unauthenticated remote attacker to execute arbitrary SQL via the user_id parameter. Root cause is lack of input validation/paramet...