medium6.1Public exploit code
CVE-2017-3133
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replaceme…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fortinet FortiOS < 5.6.0 - Cross-Site Scripting2017-07-28 · webapps · hardware · Verified
Impact
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortios | through 5.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100009
- http://www.securitytracker.com/id/1039020
- https://fortiguard.com/advisory/FG-IR-17-104
- https://www.exploit-db.com/exploits/42388/
- http://www.securityfocus.com/bid/100009
- http://www.securitytracker.com/id/1039020
- https://fortiguard.com/advisory/FG-IR-17-104
- https://www.exploit-db.com/exploits/42388/