| 标题 | BDCOM P3310D 10.1.0F Cross Site Scripting |
|---|
| 描述 | The Cross-Site Scripting (XSS) vulnerability was identified in the management application of the Powador-proLOG XL. To exploit this vulnerability, it is necessary to access inside "remote monitor," in the submenu "rmon config," under the "rmon event" tab, in the function to add "new," the payload <img/src/onerror=prompt(8)> was inserted into the Description field
script: <img/src/onerror=prompt(8)> |
|---|
| 来源 | ⚠️ http://x.x.x.x:8082/ |
|---|
| 用户 | Fergod (UID 55882) |
|---|
| 提交 | 2026-04-04 22時56分 (6 月前) |
|---|
| 管理 | 2026-04-24 21時58分 (20 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 359555 [BDCOM P3310D 0.4.2 10.1.0F Build 86345 rmon event Tab Description 跨网站脚本] |
|---|
| 积分 | 17 |
|---|