| タイトル | Castlenet Technology DOCSIS 3.0 CBW383G2N_0002.5510mp5.006 Basic Cross Site Scripting |
|---|
| 説明 | The Cross-Site Scripting (XSS) vulnerability was identified in the management application of the Castlenet Technology DOCSIS 3.0 router. To exploit this vulnerability, it is necessary to access the "Wireless" menu and modify the "SSID" field, which is an input field used to set the wireless network name. The affected field is "SSID", where it is possible to inject a malicious Cross-Site Scripting (XSS) script.
script: <img/src/onerror=prompt(8)> |
|---|
| ソース | ⚠️ http://x.x.x.x:8080/wlanPrimaryNetwork.asp |
|---|
| ユーザー | Fergod (UID 55882) |
|---|
| 送信 | 2025年03月01日 02:12 (2 年 ago) |
|---|
| モデレーション | 2025年03月11日 15:53 (11 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 299284 [Castlenet CBW383G2N 迄 20250301 Wireless Menu /wlanPrimaryNetwork.asp SSID クロスサイトスクリプティング] |
|---|
| ポイント | 17 |
|---|