CVE-2020-15036 – NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The applica

4 years ago

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Linked.php dv parameter.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15036

Reference (s):

https://gist.github.com/sudoninja-noob/c1722c118abc7a562a9a0de726266a19
https://www.nedi.ch/download/