A cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400 between version 8 and 11 included allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the f parameter.
References
| Link | Resource |
|---|---|
| http://wi400.com | Product |
| https://labs.yarix.com/advisories/CVE-2022-48111/ | Third Party Advisory |
| http://sipe.com | Broken Link |
| https://devisions.github.io/blog/cve-2022-48111 | Exploit Third Party Advisory |
| https://labs.yarix.com/2023/02/siri-wi400-xss-on-login-page-cve-2022-48111/ | Exploit Third Party Advisory |
Advertisement
Configurations
Information
Published : 2023-03-10 07:15
Updated : 2023-03-15 06:56
NVD link : CVE-2022-48111
Mitre link : CVE-2022-48111
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Advertisement
Products Affected
siri-informatica
- wi400