Lucene search

K
packetstormJonas Rapero CastilloPACKETSTORM:122005
HistoryJun 13, 2013 - 12:00 a.m.

Samsung Series Cross Site Scripting

2013-06-1300:00:00
Jonas Rapero Castillo
packetstormsecurity.com
32

0.001 Low

EPSS

Percentile

49.4%

`===========================================================================  
SAMSUNG  
====================================================================  
===========================================================================  
  
1.Advisory Information  
Title: Samsung Series Vulnerability  
Date Published: 12/06/2013  
Date of last updated: 12/06/2013  
  
2.Vulnerability Description  
The following vulnerability has been found in these devices:  
-CVE-2013-3964. Cross Site Scripting(CWE-79)  
  
3.Affected Products  
CVE-2013-3964, the following product are affected: SHR-5162, SHR-5082   
ItΒ’s possible others models are affected but they were not checked: SHR-5XXX,SHR-516X,SHR-508X,SHR-5042,SHR-4160,SHR-4081,SHR-2XXX,SHR-216X,SHR-208X,SHR-204X  
  
4.PoC  
4.1.Cross Site Scripting (XSS)  
CVE-2013-3964, Cross Site Scripting non-persistent.  
_____________________________________________________________________________  
http://xx.xx.xx.xx/<script>alert(123)</script>  
_____________________________________________________________________________  
  
5.Credits  
CVE-2013-3964 ,was discovered by JonΓ‘s Ropero Castillo.   
  
6.Report Timeline  
-2013-06-11: Students try to contact to Samsung Support Centre, but the service is temporarily down.   
`

0.001 Low

EPSS

Percentile

49.4%

Related for PACKETSTORM:122005