ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script co

BROWSER

ZKTECO

16-03-2026 11:20

CVE-2016-20027 Vulnerabilidad documentada

Sin puntuación

Tags

#xss

#site

#cross

#cross-site

#zkteco

#browser

#application

#cross-site scripting

#affected

#attackers

#arbitrary

#vulnerable

#scripting

#security

#malicious

#inject

#execute

#allow

#attack

#affect

Descripción

ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script code by injecting malicious payloads through unsanitized parameters in scripts. Attackers can craft URLs with XSS vulnerable scripts a user's browser session within the context of affected application.

https://cxsecurity.com/issue/WLB-2016080267

https://exchange.xforce.ibmcloud.com/vulnerabilities/116476

https://packetstormsecurity.com/files/138568

https://www.vulncheck.com/advisories/zkteco-zkbiosecurity-multiple-reflected-xss-vulnerabilities

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5363.php

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2016-20027

Resultados similares

Coincidentes en almenos en 50% de los tags

16-03-2026 CVE-2016-20032
ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that...
Ver información

16-03-2026 CVE-2016-20031
ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp th...
Ver información