medium6.1Public exploit code
CVE-2017-15287
There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dreambox Plugin BouquetEditor - Cross-Site Scripting2017-10-12 · webapps · hardware
Impact
There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bouqueteditor Project | Bouqueteditor | Version 2.0.0 |