CVE-2019-12460

Description

References

• packetstormsecurity.com/files/158174/WebPort-1.19.1-Cross-Site-Scripting.html
• emreovunc.com/blog/en/WebPort-Reflected-XSS-01.png · Exploit
• EmreOvunc/WebPort-v1.19.1-Reflected-XSS · Exploit

web port 的其他漏洞

• CVE-2020-18668中危 5.4Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.
• CVE-2020-18665中危 5.3Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.
• CVE-2020-18664中危 5.4Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.
• CVE-2020-23659中危 5.4WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.
• CVE-2019-12461中危 6.1Web Port 1.19.1 allows XSS via the /log type parameter.