Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zForm_save_changes sip_nick parameter. The password of alphaadmin for the admin account may be used for authentication in some cases.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T11:51:17.702Z
Reserved: 2018-12-06T00:00:00
Link: CVE-2018-19927

No data.

Status : Modified
Published: 2018-12-06T23:29:01.753
Modified: 2024-11-21T03:58:49.797
Link: CVE-2018-19927

No data.