QwikSec

Security Database

CVE

CWE

Training

CVE-2015-1444

Published: Feb 6, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allow remote attackers to inject arbitrary web script or HTML via the (1) conntrack.cgi, (2) index.cgi, (3) log_syslog.cgi, (4) problems.cgi, (5) status.cgi, (6) status_network.cgi, or (7) status_system.cgi script in admin/.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.fli4l.de/fileadmin/fli4l/security/advisory-FFL-1113.txt

x_refsource_CONFIRM

[oss-security] 20150131 RCE, XSS and HTTP header injection in fli4l web interface

mailing-list

x_refsource_MLIST

fli4l-cve20151444-xss(100610)

vdb-entry

x_refsource_XF

[oss-security] 20150201 Re: RCE, XSS and HTTP header injection in fli4l web interface

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.