| Название | Link-net LW-N915R 17s.20.001.908 Cross Site Scripting |
|---|
| Описание | The Cross-Site Scripting (XSS) vulnerability was identified in the management application of the Link-net Model: LW-N915R router. To exploit this vulnerability, it is necessary to access the "/wireless/basic.asp" and modify the "Network Name (SSID)" field. The affected field is "Network Name (SSID)", where it is possible to inject a malicious Cross-Site Scripting (XSS) script.
script: <img/src/onerror=prompt(8)> |
|---|
| Источник | ⚠️ http://x.x.x.x/wireless/basic.asp |
|---|
| Пользователь | Fergod (UID 55882) |
|---|
| Представление | 02.08.2025 02:52 (9 месяцы назад) |
|---|
| Модерация | 10.08.2025 10:15 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 319368 [JCG Link-net LW-N915R 17s.20.001.908 Wireless Basic Settings Page /wireless/basic.asp Network Name межсайтовый скриптинг] |
|---|
| Баллы | 20 |
|---|