medium6.1Public exploit code
CVE-2017-3132
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fortinet FortiOS < 5.6.0 - Cross-Site Scripting2017-07-28 · webapps · hardware · Verified
Impact
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortios | through 5.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100009
- http://www.securitytracker.com/id/1039020
- https://fortiguard.com/advisory/FG-IR-17-104
- https://www.exploit-db.com/exploits/42388/
- http://www.securityfocus.com/bid/100009
- http://www.securitytracker.com/id/1039020
- https://fortiguard.com/advisory/FG-IR-17-104
- https://www.exploit-db.com/exploits/42388/