Comodo Dome Firewall Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Comodo Dome Firewall version 2.7.0. This vulnerability exists in the '/korugan/proxyconfig' endpoint, where attackers can inject malicious JavaScript into several POST parameters. The injected scripts are executed in the context of the administrator's browser.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where injected scripts are executed in the administrator's browser session.

Reproduction

To reproduce this vulnerability, send a POST request to the '/korugan/proxyconfig' endpoint with a crafted JavaScript payload in one of the following parameters: PROXY_PORT, VISIBLE_HOSTNAME, ADMIN_MAIL_ADDRESS, CACHE_MEM, MAX_SIZE, MIN_SIZE, or DST_NOCACHE. The injected script will be executed in the administrator's browser.