Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-13407

Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AndroVideo Advan VD-1 firmware

  • up to 230affected

References