| शीर्षक | Beetel Router Beetel 450TC3 V01.00.00_01 Cross Site Scripting |
|---|
| विवरण | A stored cross-site scripting (XSS) vulnerability exists in Beetel 450TC3 Router firmware V01.00.00_01. The issue is caused by improper sanitization and output encoding of user-supplied input in the username field of the user management component. An authenticated low-privileged user can create or modify a user account containing malicious JavaScript code in the username field, which is subsequently stored by the application. When an administrator later accesses the user management page to view the list of users, the injected script is executed in the administrator's browser context.
Successful exploitation may allow execution of arbitrary JavaScript with the administrator's session privileges, potentially leading to session hijacking, unauthorized administrative actions, modification of router configuration, user management operations, and other actions performed on behalf of the administrator. |
|---|
| स्रोत | ⚠️ https://github.com/Greejith-k/Stored-Cross-Site-Scripting-Stored-XSS-Vulnerability-in-Beetel-450TC3-Router |
|---|
| उपयोगकर्ता | Greejith (UID 99578) |
|---|
| सबमिशन | 14/07/2026 08:47 AM (2 महीनों पहले) |
|---|
| संयम | 29/08/2026 06:29 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397038 [Beetel 450TC3 01.00.00_01 User Management उपयोगकर्ता नाम क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|