Lucene search
PRIOn knowledge basePRION:CVE-2019-18265HistoryNov 30, 2022 - 11:15 p.m.
Cross site scripting
2022-11-3023:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site scripting
dasdec
software
vulnerability
remote attackers
web script
html
ssh
login page
http host header
logs
web application
0.001 Low
EPSS
Percentile
29.3%
Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected content is stored in logs and rendered when viewed in the web application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dasdec_i_firmware | lt | 4.1 | |
| dasdec_ii_firmware | lt | 4.1 | |
| dasdec_iii_firmware | lt | 4.1 | |
| one-net_firmware | lt | 4.1 | |
| one-net_se_firmware | lt | 4.1 |
Related
nvd
nvd
CVE-2019-18265
2022-11-30 23:15:09
cvelist
cvelist
CVE-2019-18265
2022-11-30 22:58:26
cve
cve
CVE-2019-18265
2022-11-30 23:15:09
ics
ics
Digital Alert Systems DASDEC
2022-11-23 12:00:00