Sql injection

2020-12-0908:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing Main_Login.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to influence the appearance of the login page, aka text injection.

CPENameOperatorVersion
rt-ac88u_firmwarelt3.1.0.108

CPE	Name	Operator	Version
	rt-ac88u_firmware	lt	3.1.0.108

References

vuldb.com/?id.165678