CVE-2019-12461

概要

参考情報

• packetstormsecurity.com/files/158174/WebPort-1.19.1-Cross-Site-Scripting.html
• emreovunc.com/blog/en/WebPort-Reflected-XSS-02.png · Exploit
• EmreOvunc/WebPort-v1.19.1-Reflected-XSS · Exploit

web port のその他の脆弱性

• CVE-2020-18668中 5.4Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.
• CVE-2020-18665中 5.3Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.
• CVE-2020-18664中 5.4Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.
• CVE-2020-23659中 5.4WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.
• CVE-2019-12460中 6.1Web Port 1.19.1 allows XSS via the /access/setup type parameter.