जमा करें #563437: TOTOLINK A720R V4.1.5cu.374 Improper Access Controlsजानकारी

शीर्षकTOTOLINK A720R V4.1.5cu.374 Improper Access Controls
विवरणThe TOTOLINK A720R V4.1.5cu.374 firmware contains an unauthorized system log deletion vulnerability. This vulnerability occurs when a POST request is sent to the /cgi-bin/cstecgi.cgi with the parameter {"topicurl":"clearSyslog"}, allowing an attacker to delete system logs without authentication.
स्रोत⚠️ https://github.com/at0de/my_vulns/blob/main/TOTOLINK/A720R/clearSyslog.md
उपयोगकर्ता
 153528990 (UID 64409)
सबमिशन22/04/2025 03:49 AM (1 वर्ष पहले)
संयम04/05/2025 08:25 PM (13 days later)
स्थितिप्रतिलिपि
VulDB प्रविष्टि307373 [TOTOLINK A720R 4.1.5cu.374 Log /cgi-bin/cstecgi.cgi topicurl अधिकार वृद्धि]
अंक0

Want to stay up to date on a daily basis?

Enable the mail alert feature now!