CVE-2019-7420 – SAMSUNG X7400GX Sync Thru Web Cross Site Scripting
https://notcve.org/view.php?id=CVE-2019-7420
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter. Existe Cross-Site Scripting (XSS) en SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 en "/sws.application/information/networkinformationView.sws" en el parámetro tabName. SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 suffers from multiple cross site scripting vulnerabilities. • http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html http://seclists.org/fulldisclosure/2019/Feb/28 http://www.samsung.com/Support/ProductSupport/download/index.aspx http://www.samsungprinter.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2019-7418 – SAMSUNG X7400GX Sync Thru Web Cross Site Scripting
https://notcve.org/view.php?id=CVE-2019-7418
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc. Existe Cross-Site Scripting (XSS) en SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 en "/sws/swsAlert.sws" en múltiples parámetros: flag, frame, func y Nfunc. SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 suffers from multiple cross site scripting vulnerabilities. • http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html http://seclists.org/fulldisclosure/2019/Feb/28 http://www.samsung.com/Support/ProductSupport/download/index.aspx http://www.samsungprinter.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2019-7421 – SAMSUNG X7400GX Sync Thru Web Cross Site Scripting
https://notcve.org/view.php?id=CVE-2019-7421
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL. Existe Cross-Site Scripting (XSS) en SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 en "/sws.login/gnb/loginView.sws" en múltiples parámetros: contextpath y basedURL. SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 suffers from multiple cross site scripting vulnerabilities. • http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html http://seclists.org/fulldisclosure/2019/Feb/28 http://www.samsung.com/Support/ProductSupport/download/index.aspx http://www.samsungprinter.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2019-7419 – SAMSUNG X7400GX Sync Thru Web Cross Site Scripting
https://notcve.org/view.php?id=CVE-2019-7419
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title. Existe Cross-Site Scripting (XSS) en SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 en "/sws/leftmenu.sws" en múltiples parámetros: ruiFw_id, ruiFw_pid y ruiFw_title. SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 suffers from multiple cross site scripting vulnerabilities. • http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html http://seclists.org/fulldisclosure/2019/Feb/28 http://www.samsung.com/Support/ProductSupport/download/index.aspx http://www.samsungprinter.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •