medium5.4Public exploit code
CVE-2017-3131
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fortinet FortiOS < 5.6.0 - Cross-Site Scripting2017-07-28 · webapps · hardware · Verified
Impact
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortios | Versions 5.4.0, 5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100009
- http://www.securitytracker.com/id/1039020
- https://fortiguard.com/advisory/FG-IR-17-104
- https://www.exploit-db.com/exploits/42388/
- http://www.securityfocus.com/bid/100009
- http://www.securitytracker.com/id/1039020
- https://fortiguard.com/advisory/FG-IR-17-104
- https://www.exploit-db.com/exploits/42388/