SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  rConfig devicemgmnt.php XSS

Category: WEB-ATTACKS      

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12256


Relevant Information