| 标题 | Tilgin FIBER HOME GATEWAY HG1522 HG13xxx_CSx000-01_09_01_12 Cross Site Scripting |
|---|
| 描述 | A cross-site scripting (XSS) vulnerability has been discovered in the product_info page of Tilgin FIBER HOME GATEWAY HG1522 which can be accessed without login. The vulnerability is in the href attribute An attacker can use this vulnerability to inject malicious Javascript code in the context of a victim's browser, which can be triggered by clicking on the link.
#Steps to Reproduce
1). Navigate to - http://IP/status/product_info/
2). Insert a generic payload after product_info
POC : http://IP/status/product_info/%3CBODY%20ONLOAD=alert('1')%3E |
|---|
| 用户 | The_Druk (UID 70236) |
|---|
| 提交 | 2024-06-18 23時08分 (2 年前) |
|---|
| 管理 | 2024-06-26 18時23分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 269755 [Genexis Tilgin Fiber Home Gateway HG1522 CSx000-01_09_01_12 /status/product_info/ product_info 跨网站脚本] |
|---|
| 积分 | 17 |
|---|