medium6.1
CVE-2019-20076
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration).
Impact
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netis-Systems | Dl4343 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://drive.google.com/open?id=1HrYqVKlSxhQqB5tNhhLIgpyfi0Y2ZL80
- https://drive.google.com/open?id=1i5gIrJRy5L7lTIsYZp9GsvR8ZGCWtnMj
- https://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-2-netis.html
- https://drive.google.com/open?id=1HrYqVKlSxhQqB5tNhhLIgpyfi0Y2ZL80
- https://drive.google.com/open?id=1i5gIrJRy5L7lTIsYZp9GsvR8ZGCWtnMj
- https://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-2-netis.html