CVE-2014-5382 in Technik microControl
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 (937) allow remote attackers to inject arbitrary web script or HTML via the position textbox in the configuration menu or other unspecified vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
08/20/2014
Disclosure
08/20/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70682 | Schrack Technik microControl cross site scripting | 79 | Not defined | Not defined | CVE-2014-5382 |