Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68509
HistoryJun 21, 2022 - 12:00 a.m.

Trendnet IP-110wn proname parameter cross-site scripting vulnerability

2022-06-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
trendnet ip-110wn
cross-site scripting
proname parameter
client side
trendnet inc.

EPSS

0.001

Percentile

34.0%

Trendnet IP-110wn is a wireless network camera from Trendnet, Inc. A cross-site scripting vulnerability exists in Trendnet IP-110wn fw_tv-ip110wn_v2 (1.2.2.68) version, which originates from the /admin/scheprofile.cgi proname parameter in /admin/scheprofile.cgi lacks checksum filtering of user-supplied data and output data. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

34.0%

Related for CNVD-2022-68509