Cross site scripting

Cudy LT400 1.13.4 is vulnerable Cross Site Scripting XSS in /cgi-bin/luci/admin/network/bandwidth via the icon parameter...

CVE-2023-31852: Improper Neutralization of Input During Web Page Generation

Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting XSS in cgi-bin/luci/admin/network/wireless/config via the iface parameter...

CVE-2023-31851: Improper Neutralization of Input During Web Page Generation

Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...

PT-2023-23490

Name of the Vulnerable Software and Affected Versions Cudy LT400 version 1.13.4 Description The issue concerns a Cross Site Scripting XSS problem. It is related to the cgi-bin/luci/admin/network/wireless/config API endpoint, specifically via the iface parameter. Recommendations For Cudy LT400...

PT-2023-23489

Name of the Vulnerable Software and Affected Versions Cudy LT400 version 1.13.4 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /cgi-bin/luci/admin/network/wireless/status endpoint via the iface parameter. Recommendations For Cudy...

CVE-2023-31853: Improper Neutralization of Input During Web Page Generation

Cudy LT400 1.13.4 is vulnerable Cross Site Scripting XSS in /cgi-bin/luci/admin/network/bandwidth via the icon parameter...

CVE-2019-18992: Improper Neutralization of Input During Web Page Generation

OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on router" and "New forward rule" and "New Source NAT" this can occur, for example, on a TP-Link Archer C7 device...

CVE-2019-18993: Improper Neutralization of Input During Web Page Generation

OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards URI this can occur, for example, on a TP-Link Archer C7 device...

CVE-2019-17367: Cross-Site Request Forgery (CSRF)

OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, firewall/forwards, firewall/rules, network/wan, network/wan6, or network/lan under /cgi-bin/luci/admin/network/...

PT-2019-5518

Name of the Vulnerable Software and Affected Versions OpenWRT firmware version 18.06.4 Description The issue exists due to incorrect functionality of the web page structure protection mechanism in the LuCI web interface configuration of the OpenWRT embedded operating system. This can be exploited...