| शीर्षक | tp-link TL-SG108E 1.0.0 Build 20201208 Rel.40304 Use of GET Request Method With Sensitive Query Strings |
|---|
| विवरण | The /usr_account_set.cgi endpoint transmits the username and password via a GET request, exposing sensitive credentials in the URL. This practice increases the risk of information leakage through browser history, logs, or intercepted network traffic, compromising account security. |
|---|
| स्रोत | ⚠️ https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp-link%20sensitive%20info%20in%20GET.md |
|---|
| उपयोगकर्ता | error404unknown (UID 53361) |
|---|
| सबमिशन | 10/01/2025 12:06 AM (2 साल पहले) |
|---|
| संयम | 27/01/2025 11:29 AM (17 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 293508 [TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304 HTTP GET Request /usr_account_set.cgi username/password सूचना का प्रकटीकरण] |
|---|
| अंक | 18 |
|---|