Vulnerabilities

TI-2023-20689 CVE-2023-39575 · GHSA-4r7p-4rfr-6jwr

A reflected cross-site scripting (XSS) vulnerability in the url_str URL parameter of ISL…

MEDIUM 58

A reflected cross-site scripting (XSS) vulnerability in the url_str URL parameter of ISL ARP Guard v4.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2023-09-19 No fix listed CWE-79

TI-2019-13502 CVE-2019-18663 · GHSA-w8pw-7686-m9pr

A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5…

MEDIUM 45

A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attackers to execute arbitrary SQL commands via the user_id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01428 Published 2019-11-04 No fix listed CWE-89

Vulnerabilities

Filters

A reflected cross-site scripting (XSS) vulnerability in the url_str URL parameter of ISL…

A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5…