CVE-2019-7687

cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter. No sanitization is performed for user input data.

• CWE-79

• http://packetstormsecurity.com/files/151654/Jiofi-4-JMR-1140-Cross-Site-Scripting.htmlBroken Link, Third Party Advisory, VDB Entry
• https://drive.google.com/file/d/1EhW-XfjuQfy2scjKWW_heo-7nzKWffW6/view?usp=sharingExploit, Third Party Advisory
• https://drive.google.com/file/d/1GlDF8RCRepNLHrgfelTMsjsYUSZvXkhw/view?usp=sharingExploit, Third Party Advisory
• https://jiosecuritybugs.blogspot.com/2019/02/cve-2019-7687-jiofi-4-jmr1140.htmlBroken Link, Third Party Advisory
• https://www.exploit-db.com/exploits/46363/Broken Link, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/151654/Jiofi-4-JMR-1140-Cross-Site-Scripting.htmlBroken Link, Third Party Advisory, VDB Entry
• https://drive.google.com/file/d/1EhW-XfjuQfy2scjKWW_heo-7nzKWffW6/view?usp=sharingExploit, Third Party Advisory
• https://drive.google.com/file/d/1GlDF8RCRepNLHrgfelTMsjsYUSZvXkhw/view?usp=sharingExploit, Third Party Advisory
• https://jiosecuritybugs.blogspot.com/2019/02/cve-2019-7687-jiofi-4-jmr1140.htmlBroken Link, Third Party Advisory
• https://www.exploit-db.com/exploits/46363/Broken Link, Third Party Advisory, VDB Entry

Published

May 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7674An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.…
• CVE-2019-7675An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.…
• CVE-2019-7676A weak password vulnerability was discovered in Enphase Envo…
• CVE-2019-7677XSS exists in Enphase Envoy R3.*.* via the profileName param…
• CVE-2019-7678A directory traversal vulnerability was discovered in Enphas…
• CVE-2019-7684inxedu through 2018-12-24 has a vulnerability that can lead …
• CVE-2019-7690In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the …
• CVE-2019-7692install/install.php in CIM 0.9.3 allows remote attackers to …
• CVE-2019-7693Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the R…
• CVE-2019-7697An issue was discovered in Bento4 v1.5.1-627. There is an as…
• CVE-2019-7698An issue was discovered in AP4_Array<AP4_CttsTableEntry>::En…
• CVE-2019-7699A heap-based buffer over-read occurs in AP4_BitStream::Write…