| عنوان | ASUS RT-N12E 2.0.0.19 Cross Site Scripting |
|---|
| الوصف | In the 'index.asp' directory within the user account, there is an unrestricted stored Cross-Site Scripting (XSS) vulnerability and injection attacks on the 'SSID' parameter of the "ASUS RT-N12E" system. This function executes the user parameter without restrictions. To view the script in action, simply access the 'sysinfo.asp' directory.
Malicious attackers can exploit this vulnerability to obtain sensitive information from clients.
script :<img/src/onerror=prompt(8)> |
|---|
| المصدر | ⚠️ http://x.x.x.x:8080/ |
|---|
| المستخدم | Fergod (UID 55882) |
|---|
| ارسال | 06/02/2025 12:58 PM (2 سنوات منذ) |
|---|
| الاعتدال | 15/02/2025 04:25 PM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 295962 [Asus RT-N12E 2.0.0.19 sysinfo.asp SSID البرمجة عبر المواقع] |
|---|
| النقاط | 17 |
|---|