Published: 21/03/2023 Updated: 10/04/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

An issue found in Paradox Security Systems IPR512 allows malicious users to cause a denial of service via the login.html and login.xml parameters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
paradox ipr512_firmware -

Paradox Security Systems version IPR512 suffers from a denial of service vulnerability ...

In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as "</script>" that will overwrite configurations in the file "login.xml" and cause the login page to crash.

Injection vulnerability in Paradox Security Systems IPR512 - CVE-2023-24709 PoC In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as </script> that will overwrite configurations in the file "loginxml" and cause the login form to crash and make it unavailable !!!WARNING!!! Be aware that it will mak

In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as "</script>" that will overwrite configurations in the file "login.xml" and cause the login page to crash.

Injection vulnerability in Paradox Security Systems IPR512 - CVE-2023-24709 PoC In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as </script> that will overwrite configurations in the file "loginxml" and cause the login form to crash and make it unavailable !!!WARNING!!! Be aware that it will mak

CWE-94 https://github.com/sunktitanic/Injection-vulnerability-in-Paradox-Security-Systems-IPR512 https://github.com/SlashXzerozero/Injection-vulnerability-in-Paradox-Security-Systems-IPR512 http://packetstormsecurity.com/files/171783/Paradox-Security-Systems-IPR512-Denial-Of-Service.html https://nvd.nist.gov https://github.com/SlashXzerozero/Injection-vulnerability-in-Paradox-Security-Systems-IPR512 https://packetstormsecurity.com/files/171783/Paradox-Security-Systems-IPR512-Denial-Of-Service.html

CVE-2023-24709

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect