medium6.1
CVE-2019-20070
On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration).
Impact
On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netis-Systems | Dl4343 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://drive.google.com/open?id=1EtpCu6eZ0Hf2J70zg59wIlhUE8_bx1HE
- https://drive.google.com/open?id=1vIHv-UY0QLdnxDi-RW1hQHrdcuho0HRf
- https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-netis-dl4323.html
- https://drive.google.com/open?id=1EtpCu6eZ0Hf2J70zg59wIlhUE8_bx1HE
- https://drive.google.com/open?id=1vIHv-UY0QLdnxDi-RW1hQHrdcuho0HRf
- https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-netis-dl4323.html