medium6.1
CVE-2019-20073
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).
Impact
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netis-Systems | Dl4343 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://drive.google.com/open?id=1CxLrSKAczEZpm_7FERIrCGGJAs2mp6Go
- https://drive.google.com/open?id=1puObYuPWktesaVW1SO8uvSr1g4SnAtAw
- https://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-netisdl4323.html
- https://drive.google.com/open?id=1CxLrSKAczEZpm_7FERIrCGGJAs2mp6Go
- https://drive.google.com/open?id=1puObYuPWktesaVW1SO8uvSr1g4SnAtAw
- https://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-netisdl4323.html