CVE-2014-5382 in Schrack Technik microControl
Resumen (Inglés)
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 (937) allow remote attackers to inject arbitrary web script or HTML via the position textbox in the configuration menu or other unspecified vectors.
Reservar
2014-08-20
Divulgación
2014-08-20
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 70682 | Schrack Technik microControl secuencias de comandos en sitios cruzados | 79 | No está definido | No está definido | CVE-2014-5382 |