patryk_bogdan

3 exploits Active since Sep 2017
CVE-2017-3132 EXPLOITDB MEDIUM text WORKING POC
Fortinet FortiOS < 5.6.0 - Cross-Site Scripting via FortiToken Activation Action Input
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken.
CVSS 6.1
CVE-2017-3131 EXPLOITDB MEDIUM text WORKING POC
FortiOS 5.4.0-5.4.4 and 5.6.0 - Cross-Site Scripting via FortiView Applications Filter Input
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView.
CVSS 5.4
CVE-2017-3133 EXPLOITDB MEDIUM text WORKING POC
Fortinet FortiOS < 5.6.0 - Cross-Site Scripting via SSL-VPN Replacement Message
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN.
CVSS 6.1