CVE-2012-4923 Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule param...
MediumCVSS 4.3
EPSS 1.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian.cgi, or (3) PATH_INFO to openvpn_users.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Endian firewall | = 2.4 | No fix listed |
References
- packetstormsecurity.org exploit
- 52076 exploit vdb-entry
- www.vulnerability-lab.com
- endianfirewall-multiple-xss(73330) vdb-entry