CVE-2013-6923

Published: 09/01/2014 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote malicious users to inject arbitrary web script or HTML via the (1) fullname parameter to admin/access_control_user_edit.php or (2) workname parameter to admin/network_workgroup_domain.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
seagate blackarmor nas 220 firmware sg2000-2000.1331
seagate blackarmor nas 220 st320005lsa10g-rk
seagate blackarmor nas 220 st340005lsa10g-rk
seagate blackarmor nas 220 stav6000100

# Exploit Title: Seagate BlackArmor NAS - Multiple Persistent Cross Site Scripting Vulnerabilities # Google Dork: N/A # Date: 04-01-2014 # Exploit Author: Jeroen - IT Nerdbox # Vendor Homepage: <wwwseagatecom/> wwwseagatecom/ # Software Link: <wwwseagatecom/support/downloads/item/banas-220-firmware-master-d ...

Seagate BlackArmor NAS sg2000-20001331 suffers from multiple persistent cross site scripting vulnerabilities ...

CWE-79 http://packetstormsecurity.com/files/124685 http://www.exploit-db.com/exploits/30727 https://exchange.xforce.ibmcloud.com/vulnerabilities/90111 https://nvd.nist.gov https://www.exploit-db.com/exploits/30727/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-6923

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect