Pesquisadores
Voltar
Hayato Doi
Pesquisador de
Kanazawa Institute of Technology
#45672
de 60,596
6.8
CVSS total
Vulnerabilidades
·
1
PT-2019-8690
2019-01-09
6.8
CVE-2018-0665
Yamaha
Nvr500
The issue allows an administrative user to embed arbitrary scripts into the configuration data through a certain form field of the configuration page. This may result in the execution of these scripts on another administrative user's web browser.