medium6.1
CVE-2019-20072
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration).
Impact
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netis-Systems | Dl4343 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://drive.google.com/open?id=1IGRYVci8fxic0jJJb-pAfAK1kJ4V2yGM
- https://drive.google.com/open?id=1VPEX136-JaVDeY0JgQTqRNdMTPOhfEN7
- https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-hostname-input.html
- https://drive.google.com/open?id=1IGRYVci8fxic0jJJb-pAfAK1kJ4V2yGM
- https://drive.google.com/open?id=1VPEX136-JaVDeY0JgQTqRNdMTPOhfEN7
- https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-hostname-input.html