QwikSec

Security Database

CVE

CWE

Training

CVE-2014-1612

Published: Jan 30, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20140123 Reflected cross-site scripting (XSS) vulnerability in Mediatrix Web Management Interface login page

mailing-list

x_refsource_BUGTRAQ

mediatrixwebmanagement-cve20141612-xss(90656)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_CERT-VN

http://packetstormsecurity.com/files/124931/Mediatrix-4402-Cross-Site-Scripting.html

x_refsource_MISC

vdb-entry

x_refsource_OSVDB

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.