CVE-2019-25415
MEDIUMComodo Dome Firewall 2.7.0 - Cross-Site Scripting via Hotspot Permanent Users MACADDRESSES Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25415. PoCs published by Ozer Goker.
AI-analyzed exploit summary The exploit demonstrates multiple reflected and stored XSS vulnerabilities in Comodo Dome Firewall 2.7.0 by providing specific URLs, methods, parameters, and payloads. It includes 29 distinct XSS vectors, each with clear instructions for exploitation.
Description
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the hotspot_permanent_users endpoint. Attackers can send POST requests with JavaScript payloads in the MACADDRESSES parameter to execute arbitrary scripts in users' browsers.
Exploits (1)
The exploit demonstrates multiple reflected and stored XSS vulnerabilities in Comodo Dome Firewall 2.7.0 by providing specific URLs, methods, parameters, and payloads. It includes 29 distinct XSS vectors, each with clear instructions for exploitation.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N