| 제목 | Netis Systems WF2409E V3.3.42541 Cross Site Scripting |
|---|
| 설명 | A Cross-Site Scripting (XSS) vulnerability has been discovered in the management application of theNetis WF2409E. To exploit this issue, an attacker must access the "Wireless Settings" option and modify the "SSID" field. The injected XSS payload is triggered whenever a network change occurs or when accessing any connection-related section. The vulnerable field is "SSID ," which allows the injection of malicious Cross-Site Scripting (XSS) code.
Payload: <img/src/onerror=prompt(8)> |
|---|
| 원천 | ⚠️ http://x.x.x.x:8080/index.htm |
|---|
| 사용자 | Fergod (UID 55882) |
|---|
| 제출 | 2026. 09. 13. AM 02:27 (1 월 ago) |
|---|
| 모더레이션 | 2026. 10. 11. PM 04:32 (29 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 416689 [Netis WF2409E 3.3.42541 Wireless Settings SSID 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|