CVE-2019-25421
MEDIUMComodo Dome Firewall < 2.7.0 - Cross-Site Scripting via policyfw Endpoint Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25421. PoCs published by Ozer Goker.
AI-analyzed exploit summary The exploit demonstrates multiple reflected and stored XSS vulnerabilities in Comodo Dome Firewall 2.7.0 by providing specific URLs, methods, parameters, and payloads. It includes 29 distinct XSS vectors, each with clear instructions for exploitation.
Description
Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoint. Attackers can submit POST requests with JavaScript payloads in the mac, target, and remark parameters to execute arbitrary code in administrator browsers or store persistent scripts in the application.
Exploits (1)
The exploit demonstrates multiple reflected and stored XSS vulnerabilities in Comodo Dome Firewall 2.7.0 by providing specific URLs, methods, parameters, and payloads. It includes 29 distinct XSS vectors, each with clear instructions for exploitation.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N