Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2015/Apr/97 | Exploit Mailing List Third Party Advisory |
| http://www.securityfocus.com/archive/1/535393/100/0/threaded | |
| http://www.securityfocus.com/bid/74406 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1032204 | Third Party Advisory VDB Entry |
| http://www.vulnerability-lab.com/get_content.php?id=1359 | Exploit Third Party Advisory |
| http://seclists.org/fulldisclosure/2015/Apr/97 | Exploit Mailing List Third Party Advisory |
| http://www.securityfocus.com/archive/1/535393/100/0/threaded | |
| http://www.securityfocus.com/bid/74406 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1032204 | Third Party Advisory VDB Entry |
| http://www.vulnerability-lab.com/get_content.php?id=1359 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2015/Apr/97 - Exploit, Mailing List, Third Party Advisory | |
| References | () http://www.securityfocus.com/archive/1/535393/100/0/threaded - | |
| References | () http://www.securityfocus.com/bid/74406 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1032204 - Third Party Advisory, VDB Entry | |
| References | () http://www.vulnerability-lab.com/get_content.php?id=1359 - Exploit, Third Party Advisory |
Information
Published : 2015-04-29 20:59
Updated : 2024-11-21 02:29
NVD link : CVE-2015-3447
Mitre link : CVE-2015-3447
CVE.ORG link : CVE-2015-3447
JSON object : View
Products Affected
sonicwall
- sonicos
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')