Comodo Dome Firewall Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Comodo Dome Firewall version 2.7.0. This vulnerability allows unauthenticated attackers to inject malicious scripts by manipulating the ID parameter in requests to the /manage/ips/appid/ endpoint. The injected scripts are executed as arbitrary JavaScript in the browsers of victims.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a crafted request to the Comodo Dome Firewall 2.7.0 instance, targeting the /manage/ips/appid/ endpoint. Include a script payload in the ID parameter. The injected script will be executed in the browser of the user accessing the vulnerable endpoint.