Vulnerabilities

TI-2012-04161 CVE-2012-4923 · GHSA-h52g-q5hf-3234

Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01828 Published 2012-09-15 No fix listed CWE-79

TI-2008-00466 CVE-2008-0494 · GHSA-6f4f-mvfg-v7fq

Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2…

LOW 22

Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00871 Published 2008-01-30 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote…

Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2…