CVEvulnerability
CVE-2012-4923
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian.cgi, or (3) PATH_INFO to openvpn_users.cgi.
Affected configurations
• endian firewall 2.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/files/109942/Endian-UTM-Firewall-2.4.x-Cross-Site-Scripting.html Exploit
- http://www.securityfocus.com/bid/52076 Exploit
- http://www.vulnerability-lab.com/get_content.php?id=436 www.vulnerability-lab.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73330 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/files/109942/Endian-UTM-Firewall-2.4.x-Cross-Site-Scripting.html Exploit
- http://www.securityfocus.com/bid/52076 Exploit
- http://www.vulnerability-lab.com/get_content.php?id=436 www.vulnerability-lab.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73330 exchange.xforce.ibmcloud.com