Fnip 8X16A
Approved changes feed: RSS · Atom
cpe:2.3:a:p5:fnip-8x16a:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | P5 (52a74ca5-a14b-5a7c-ad0d-4501e49d22ec) |
|---|---|
| Product | Fnip 8X16A (c36e29dd-c01b-5749-a79f-4e93ffd0f516) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-37148 |
vulnerable | 2026-06-08 05:25:50.246170 |
P5 FNIP-8x16A/FNIP-4xSH 1.0.20, 1.0.11 - Stored Cross-Site Scripting (XSS)
LOW (3.5)
P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11 suffer from a stored cross-site scripting vulnerability. Input passed to several GET/POST parameters is not properly sanitized before being returned to the user, allowing attackers to execute arbitrary HTML and script code in a user's browser session in the context of the affected site. This can be exploited by submitting crafted input to the label modification functionality, such as the 'lab4' parameter in config.html.
Published: 2026-02-05T16:14:54.874Z
Updated: 2026-05-25T23:41:11.029Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37118 |
vulnerable | 2026-06-08 05:25:50.191339 |
P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin)
LOW (3.5)
P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user interaction. Attackers can craft malicious web pages to add new admin users, change passwords, and modify system configurations by tricking authenticated users into loading a specially crafted page.
Published: 2026-02-05T16:13:29.936Z
Updated: 2026-04-07T14:05:18.163Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36906 |
vulnerable | 2026-06-08 05:25:49.807542 |
P5 FNIP-8x16A FNIP-4xSH 1.0.20 Cross-Site Request Forgery via User Management
MEDIUM (4.3)
P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to add new admin users, change passwords, and modify system configurations by tricking authenticated users into loading a specially crafted form.
Published: 2026-01-06T15:52:20.766Z
Updated: 2026-01-06T19:15:54.010Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.