| عنوان | Beetel Router Beetel 450TC3 V01.00.00_01 Cross Site Scripting |
|---|
| الوصف | A stored cross-site scripting (XSS) vulnerability exists in Beetel 450TC3 Router firmware V01.00.00_01. The issue is caused by improper sanitization and output encoding of user-supplied input in the username field of the user management component. An authenticated low-privileged user can create or modify a user account containing malicious JavaScript code in the username field, which is subsequently stored by the application. When an administrator later accesses the user management page to view the list of users, the injected script is executed in the administrator's browser context.
Successful exploitation may allow execution of arbitrary JavaScript with the administrator's session privileges, potentially leading to session hijacking, unauthorized administrative actions, modification of router configuration, user management operations, and other actions performed on behalf of the administrator. |
|---|
| المصدر | ⚠️ https://github.com/Greejith-k/Stored-Cross-Site-Scripting-Stored-XSS-Vulnerability-in-Beetel-450TC3-Router |
|---|
| المستخدم | Greejith (UID 99578) |
|---|
| ارسال | 14/07/2026 08:47 AM (2 أشهر منذ) |
|---|
| الاعتدال | 29/08/2026 06:29 PM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 397038 [Beetel 450TC3 01.00.00_01 User Management أسم المستخدم البرمجة عبر المواقع] |
|---|
| النقاط | 20 |
|---|