Описание
Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters.
Ссылки
- Third Party Advisory
- Product
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.6.5.H (включая)
Одновременно
cpe:2.3:o:sensaphone:web600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:sensaphone:web600:-:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.0016
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
7 месяцев назад
Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters.
EPSS
Процентиль: 37%
0.0016
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79