CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.

• CWE-79

• https://packetstormsecurity.com/files/145513/Netis-WF2419-HTML-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/145513/Netis-WF2419-HTML-Injection.htmlExploit, Third Party Advisory, VDB Entry

Published

Jan 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5960Zenario v7.1 - v7.6 has SQL injection via the `Name` input f…8.8
• CVE-2018-5961CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.…
• CVE-2018-5962index.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel …
• CVE-2018-5963CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/addbookmark.p…
• CVE-2018-5964CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterfa…
• CVE-2018-5965CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterfa…
• CVE-2018-5968FasterXML jackson-databind through 2.8.11 and 2.9.x through …8.1
• CVE-2018-5969Cross Site Request Forgery (CSRF) exists in Photography CMS …
• CVE-2018-5970SQL Injection exists in the JGive 2.0.9 component for Joomla…
• CVE-2018-5971SQL Injection exists in the MediaLibrary Free 4.0.12 compone…
• CVE-2018-5972SQL Injection exists in Classified Ads CMS Quickad 4.0 via t…
• CVE-2018-5973SQL Injection exists in Professional Local Directory Script …