Unscored CVE-2013-7181 EUVD-2013-6964GHSA-wmf2-5xg5-mv5p

Cross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows remote attackers to inject arbitrary web sc…

Published Feb 4, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

Cross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows remote attackers to inject arbitrary web script or HTML via the filter parameter.

References

102820 vdb-entry
VU#593118 third-party-advisory
56732 third-party-advisory
1029731 vdb-entry
65303 vdb-entry
20140203 XSS Reflected vulnerabilities in OS of FortiWeb v 5.0.3 (CVE-2013-7181) mailing-list
http://www.fortiguard.com/advisory/FG-IR-14-002/