Cross site scripting

An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page...

CVE-2017-7316

An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page...

CVE-2017-7315

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...

CVE-2017-7316

An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page...

CVE-2017-7315

CVE-2017-7315 concerns Humax Digital HG100R devices (version 2.0.6). The vulnerability enables download of the backup file without authentication, and GatewaySettings.bin includes the router credentials in plaintext. This exposes sensitive credentials and configuration to an attacker who can obta...

CVE-2017-7316: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page...

CVE-2017-7315: Missing Authentication for Critical Function

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...

PT-2017-17659

Name of the Vulnerable Software and Affected Versions Humax Digital HG100R version 2.0.6 Description An issue was discovered where it is not necessary to use credentials to download the backup file. The router credentials are stored in plaintext inside the backup file, referred to as...

Humax Digital HG100R Cross-Site Scripting Vulnerability

The Humax Digital HG100R is a router from the Korean company Humax Digital. A cross-site scripting vulnerability exists in the 404 page in version 2.0.6 of the Humax Digital HG100R. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2017-17660

Name of the Vulnerable Software and Affected Versions Humax Digital HG100R version 2.0.6 Description An issue was discovered that allows for cross-site scripting XSS on the 404 page. Recommendations For Humax Digital HG100R version 2.0.6, consider disabling access to the 404 page as a temporary...