CVE-2018-20503

Description

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• http://packetstormsecurity.com/files/151327/SirsiDynix-e-Library-3.5.x-Cross-Site-Scripting.html ↗
• https://www.exploit-db.com/exploits/46237/ ↗
• https://pentest.com.tr/exploits/Allied-Telesis-8100L-8-Cross-Site-Scripting.html ↗