CVE-2012-5322 Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the (1) pvcName parameter to webconfig/wan/confirm.html/confirm or (...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the (1) pvcName parameter to webconfig/wan/confirm.html/confirm or (2) host_name_txtbox parameter to webconfig/lan/lan_config.html/local_lan_config.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xavi x7968 | All versions | No fix listed |
References
- packetstormsecurity.org exploit
- 48050 third-party-advisory vendor-advisory
- 52098 exploit vdb-entry
- xavi-unspec-xss(73353) vdb-entry