Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack, due to insufficient validation for the start.asp page. A successful exploit could allow the attacker to execute arbitrary scripts to access sensitive browser-based information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mitel MiVoice Office 400 web admin组件跨站脚本漏洞
Vulnerability Description
Mitel MiVoice Office 400是加拿大Mitel公司的一套中小型企业通信解决方案。该产品包括视频会议、语音通话等功能。web admin是其中的一个基于Web的管理组件。 Mitel MiVoice Office 400 R5.0 HF3 (v8839a1)及之前版本中的web admin组件存在跨站脚本漏洞，该漏洞源于程序没有充分验证start.asp页面。远程攻击者可利用该漏洞执行任意的脚本，访问基于浏览器的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A