CVE-2014-100032

CVE-2014-100032 describes a Cross-site Scripting (XSS) vulnerability in the top.html page of the Airties Air 6372 modem, exploitable by remote attackers via the productboardtype parameter. The vulnerability allows injection of arbitrary web script/HTML, with a network attack vector and no authent...