medium6.1
CVE-2015-7242
Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script o…
Impact
Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avm | Fritz\! Os | through 6.23 |
Weakness classification
References
- NVD record
- CVE.org record
- http://ds-develop.de/advisories/advisory-2016-01-07-1-avm.txt
- http://packetstormsecurity.com/files/135168/AVM-FRITZ-OS-HTML-Injection.html
- http://www.securityfocus.com/archive/1/537249/100/0/threaded
- https://avm.de/service/sicherheitsinfos-zu-updates/
- http://ds-develop.de/advisories/advisory-2016-01-07-1-avm.txt
- http://packetstormsecurity.com/files/135168/AVM-FRITZ-OS-HTML-Injection.html
- http://www.securityfocus.com/archive/1/537249/100/0/threaded
- https://avm.de/service/sicherheitsinfos-zu-updates/