Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
P5 FNIP-8x16A/FNIP-4xSH 1.0.20, 1.0.11 - Stored Cross-Site Scripting (XSS)
Vulnerability Description
P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11 suffer from a stored cross-site scripting vulnerability. Input passed to several GET/POST parameters is not properly sanitized before being returned to the user, allowing attackers to execute arbitrary HTML and script code in a user's browser session in the context of the affected site. This can be exploited by submitting crafted input to the label modification functionality, such as the 'lab4' parameter in config.html.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
P5 FNIP-8x16A和P5 FNIP-4xSH 跨站脚本漏洞
Vulnerability Description
P5 FNIP-8x16A和P5 FNIP-4xSH都是英国P5公司的一款以太网继电器控制器。 P5 FNIP-8x16A和P5 FNIP-4xSH版本和1.0.11版本存在跨站脚本漏洞，该漏洞源于对多个GET/POST参数输入清理不当，可能导致存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A