CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 1CVE-2015-4714
https://notcve.org/view.php?id=CVE-2015-4714
Cross-site scripting (XSS) vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body. Vulnerabilidad de XSS en DreamBox DM500-S permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través del parámetro mode en /body. • http://packetstormsecurity.com/files/132214/DreamBox-DM500s-Cross-Site-Scripting.html http://www.securityfocus.com/bid/75388 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.0EPSS: 0%CPEs: 11EXPL: 2CVE-2012-1025 – Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) - Remote File Disclosure
https://notcve.org/view.php?id=CVE-2012-1025
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter. Vulnerabilidad de salto de directorio en file en Enigma2 Webinterface v1.6.0 hasta v1.6.8, v1.6rc3, y v1.7.0, permite a atacantes remotos leer archivos de su elección a través de la ruta completa en el parámetro file. • https://www.exploit-db.com/exploits/18343 http://www.exploit-db.com/exploits/18343 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 2CVE-2012-1024 – Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) - Remote File Disclosure
https://notcve.org/view.php?id=CVE-2012-1024
Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Vulnerabilidad de salto de directorio en file en Enigma2 Webinterface v1.5rc1 y v1.5beta4, permite a atacantes remotos leer archivos de su elección a través de .. (punto punto) en el parámetro file. • https://www.exploit-db.com/exploits/18343 http://www.exploit-db.com/exploits/18343 https://exchange.xforce.ibmcloud.com/vulnerabilities/73109 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 4CVE-2011-4716 – DreamBox DM800 - Arbitrary File Download
https://notcve.org/view.php?id=CVE-2011-4716
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter. Vulnerabilida de salto de directorio en archivo en DreamBox DM800 v1.6rc3, v1.5rc1 y anteriores, permite a atacantes remotos leer archivos de su elección a través del parámetro file. • https://www.exploit-db.com/exploits/17422 https://www.exploit-db.com/exploits/18079 https://www.exploit-db.com/exploits/36286 http://www.exploit-db.com/exploits/18079 http://www.securityfocus.com/bid/50520 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •