| शीर्षक | Totolink N300RT V3.4.0-B20250430 Command Injection |
|---|
| विवरण | A command injection vulnerability has been discovered in the TOTOLINK N300RT Router. Attackers can exploit this vulnerability to execute arbitrary commands by sending malicious HTTP POST packets. The vulnerability is triggered when the request path is /boafrm/formWsc, prompting the user to log in and requiring a constructed sessionCheck to be sent. |
|---|
| स्रोत | ⚠️ https://github.com/jinhao118/cve/blob/main/TOTOLINK%20N300RT%20Router.md |
|---|
| उपयोगकर्ता | allanp0e (UID 94632) |
|---|
| सबमिशन | 26/01/2026 10:02 AM (8 महीनों पहले) |
|---|
| संयम | 06/02/2026 09:43 PM (11 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 334200 [Totolink N300RT 2.1.8-B20201030.1539/3.2.4-B20180730.0906 formWsc targetAPSsid अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|