Description (CNA)
V-SOL GPON/EPON OLT Platform v2.03 contains multiple reflected cross-site scripting vulnerabilities due to improper input sanitization in various script parameters. Attackers can exploit these vulnerabilities by injecting malicious HTML and script code to execute arbitrary scripts in a victim's browser session.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Guangzhou V / V-SOL GPON/EPON OLT Platform | affected V2.03.62R_IPv6; affected V2.03.54R; affected V2.03.52R; affected V2.03.49; affected V2.03.47; affected V2.03.40; affected V2.03.26; affected V2.03.24; affected V1.8.6; affected V1.4 |
CWE
CWE-79
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5537.php
- https://packetstormsecurity.com/files/154631
- https://exchange.xforce.ibmcloud.com/vulnerabilities/167864
- https://cxsecurity.com/issue/WLB-2019090194
- https://www.vsolcn.com/
ADP enrichment
No English description supplied.