Description
Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attackers to inject arbitrary web script or HTML via the mkey parameter.
References
- http://www.fortiguard.com/advisory/FG-IR-14-003/
- 102819 vdb-entry
- 65308 vdb-entry
- 1029730 vdb-entry
- 56739 third-party-advisory
- VU#728638 third-party-advisory
- 20140223 Fortinet FortiOS 5.0.5 contains a reflected cross-site scripting (XSS) vulnerability ( CVE-2013-7182) mailing-list