Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Server Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51734 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Remote endpoint settings at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to th...

CVE-2023-51734

CVE-2023-51734 affects Skyworth Router CM5100, version 4.1.1.24. The issue originates from insufficient validation of the Identity parameter in the web interface’s Remote endpoint settings, enabling a remote attacker to supply crafted input that can trigger a stored XSS vulnerability. The availab...

CVE-2023-51733

CVE-2023-51733 affects Skyworth Router CM5100 (v4.1.1.24). The issue is insufficient validation of the Identity parameter under Local endpoint settings in the web interface, allowing a remote attacker to supply crafted input and perform stored XSS on the target system. Connected CVE records confi...

CVE-2023-51733 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Local endpoint settings at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the...

CVE-2023-51733 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Local endpoint settings at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the...

CVE-2023-51732

CVE-2023-51732 affects Skyworth Router CM5100 (v4.1.1.24). The flaw is insufficient validation of the IPsec Tunnel Name input on the web interface, enabling a remote attacker to trigger stored XSS via crafted input submitted through the router’s web UI. Exploitation requires network access to the...

CVE-2023-51732 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51731

CVE-2023-51731 concerns Skyworth Router CM5100, firmware 4.1.1.24. The vulnerability arises from insufficient validation of the Hostname parameter on the web interface, enabling a remote attacker to inject input that could trigger a stored XSS payload on the targeted system. Exploitation is descr...

CVE-2023-51730 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51730

The CVE-2023-51730 entry describes a vulnerability in Skyworth Router CM5100 (version 4.1.1.24) caused by insufficient validation of user-supplied input for the DDNS Password parameter on the web interface. A remote attacker could exploit this by sending crafted input through the web interface, l...

CVE-2023-51729

CVE-2023-51729 affects Skyworth Router CM5100 (v4.1.1.24). The root cause is insufficient validation of the DDNS Username input on the router’s web interface, which could allow a remote attacker to perform stored XSS via specially crafted input. Documents do not specify any available exploit code...

CVE-2023-51728 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51728

CVE-2023-51728 affects Skyworth Router CM5100 (version 4.1.1.24). The root cause is insufficient validation of user-supplied input for the SMTP Password parameter in the web interface, enabling a remote attacker to craft input that can trigger a stored cross-site scripting (XSS) attack on the tar...

CVE-2023-51727 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51727

Summary: CVE-2023-51727 affects Skyworth Router CM5100 (v4.1.1.24). The issue is insufficient validation of the SMTP Username parameter on the web interface, allowing a remote attacker to submit crafted input. This could enable stored XSS on the targeted system. Affected component: Web interface ...

CVE-2023-51726

CVE-2023-51726 affects Skyworth Router CM5100, version 4.1.1.24. The vulnerability arises from insufficient validation of the SMTP Server Name parameter in the router’s web interface, allowing a remote attacker to craft input that could trigger a stored XSS attack on the targeted system. The init...

CVE-2023-51725

CVE-2023-51725 affects Skyworth Router CM5100 (v4.1.1.24). Root cause: insufficient validation of the Contact Email Address parameter in the web interface, enabling a remote attacker to craft input that could result in stored XSS. Documented impact is stored XSS on target system. No remediation d...

CVE-2023-51725 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Contact Email Address parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the...