Raffaella Robles

A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the "/netact/sct" dir parameter in conjunction with the `operation`=`upload` value.

An issue was discovered in the Site Configuration Tool website section, where a malicious user can change the filename of an uploaded file to include JavaScript code. This code is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. The API endpoint "/netact/sct" with the `filename` parameter is used for this purpose.

A malicious user can modify the filename of an uploaded file to include JavaScript code. This code is then stored and executed by a victim's web browser. The issue can be exploited by including malicious content as a parameter in a URL, which is then posted publicly or e-mailed to victims. Specifically, the `/netact/sct` API endpoint is used, with the `filename` parameter being vulnerable.

A remote user, authenticated to the Nokia NetAct Web Page, can upload potentially dangerous files without restrictions. This is achieved by visiting the Site Configuration Tool web site section and using the `/netact/sct` API endpoint with the `dir` parameter in conjunction with the `operation=upload` value.