cve/2014/CVE-2014-5348.md
2024-06-18 02:51:15 +02:00

719 B

CVE-2014-5348

Description

Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter.

POC

Reference

Github

No PoCs found on GitHub currently.