Description
Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) redir or (2) mkey parameter to waf/pcre_expression/validate.
Unscored
CVE-2012-6346
EUVD-2012-6201GHSA-qfq4-hgm7-w9m6
Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML …
Published Feb 9, 2018 · Updated Aug 6, 2024 · Assigned by mitre