PT-2026-6588 · Unknown · P5 Fnip-8X16A+1

CVE-2020-37148 · Publicado 2026-02-05 · Atualizado 2026-02-05

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Baixa

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11

Description P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11 are affected by a stored cross-site scripting issue. Input provided to various GET/POST parameters is not adequately sanitized before being presented back to the user, potentially enabling attackers to inject and execute arbitrary HTML and script code within a user's browser session. This can be achieved by submitting malicious input through the label modification functionality, specifically utilizing the lab4 parameter in the 'config.html' file.

Recommendations Versions 1.0.20 and 1.0.11 should be updated to a newer, secure version.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2020-37148

Produtos afetados

P5 Fnip-4Xsh

P5 Fnip-8X16A

Referências · 8

• 🔥 https://packetstormsecurity.com/files/156170/P5-FNIP-8x16A-FNIP-4xSH-1.0.20-CSRF-XSS.html · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2020-5564.php · Exploit
• 🔥 https://exploit-db.com/exploits/48362 · Exploit
• https://vulncheck.com/advisories/p-fnip-xafnip-xsh-stored-cross-site-scripting-xss · Nota
• https://t.me/CVEtracker/43839 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-37148 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/176993 · Nota
• https://p5.hu · Nota