| Название | ASUS RT-N12E 2.0.0.19 Cross Site Scripting |
|---|
| Описание | In the 'index.asp' directory within the user account, there is an unrestricted stored Cross-Site Scripting (XSS) vulnerability and injection attacks on the 'SSID' parameter of the "ASUS RT-N12E" system. This function executes the user parameter without restrictions. To view the script in action, simply access the 'sysinfo.asp' directory.
Malicious attackers can exploit this vulnerability to obtain sensitive information from clients.
script :<img/src/onerror=prompt(8)> |
|---|
| Источник | ⚠️ http://x.x.x.x:8080/ |
|---|
| Пользователь | Fergod (UID 55882) |
|---|
| Представление | 06.02.2025 12:58 (2 лет назад) |
|---|
| Модерация | 15.02.2025 16:25 (9 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 295962 [Asus RT-N12E 2.0.0.19 sysinfo.asp SSID межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|