| عنوان | UNIWAY ROUTERS Router Firmware V2.0 CROSS SITE REQUEST FORGERY |
|---|
| الوصف | Dear Team,
I trust this message finds you all in good spirits.
I wish to bring to your attention a recently discovered vulnerability in the Uniway router's firmware (Device Model: UW-302VP). It has come to light that the router lacks the utilization of cookies or any headers for authentication, thereby exposing it to CSRF (Cross-Site Request Forgery) exploitation.
Official Website: http://example.com |
|---|
| المصدر | ⚠️ https://drive.google.com/file/d/15Wr3EL4cpAS_H_Vp7TuIftssxAuzb4SL/view?usp=sharing |
|---|
| المستخدم | faiyazahmad (UID 60242) |
|---|
| ارسال | 15/12/2023 09:55 PM (3 سنوات منذ) |
|---|
| الاعتدال | 24/12/2023 09:00 AM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 248939 [Uniway UW-302VP 2.0 Admin Web Interface wlan_basic_set.cgi wlanssid/password تزوير طلبات عبر المواقع] |
|---|
| النقاط | 20 |
|---|