CVE-2012-1417

Description

Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script or HTML via the user field to cgi-bin/ConfigManApp.com.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/73573

http://www.securityfocus.com/bid/52209

http://www.osvdb.org/79675

http://secunia.com/advisories/48194

http://archives.neohapsis.com/archives/bugtraq/2012-03/0056.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS