Cross site request forgery (csrf)

A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...

CVE-2018-6391

Netis WF2419 router (firmware 2.2.36123) has a cross-site request forgery vulnerability allowing remote attackers to delete Address Reservation List settings. Root cause: CSRF. Impact is the modification/destruction of router configuration. Exploitation details are not provided in the documents; ...

CVE-2018-6391

A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...

Netis WF2419 Router - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on:...

Netis-WF2419 Cross Site Request Forgery

Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on: Windows 10 Technical Details & Descriptio...

Netis WF2419 Router - Cross-Site Request Forgery

Netis WF2419 Router - Cross-Site Request Forgery Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123...

Netis WF2419 Router - Cross-Site Request Forgery

Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on: Windows 10 Technical Details & Descriptio...

Cross site scripting

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

CVE-2018-5967 affects Netis WF2419 devices (v2.2.36123) where the Description field on the Bandwidth Control Rule Settings page is vulnerable to XSS. The root cause is inadequate filtering of user-supplied data in that Description parameter, allowing a remote attacker to inject script/HTML into t...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

netis WF2419 cross-site scripting vulnerability (CNVD-2018-03057)

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 3.2.41381, which stems from the program's failure to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

Netis WF2419 Cross-Site Scripting Vulnerability

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 2.2.36123, which is caused by the program failing to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

Cross site scripting

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

CVE-2018-6190 affects Netis WF2419 routers (version 3.2.41381). The vulnerability is HTML injection/XSS on the MAC Filtering page via the Description field, caused by insufficient input sanitization. Exploitation could allow attacker-supplied HTML/script to execute in the router’s web UI context,...

Netis-WF2419 3.2.41381 Cross Site Scripting

Exploit Title: Netis-WF2419 HTML Injection Date: 20/01/2018 Exploit Author: Sajibe Kanti Author Contact :https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419 , V3.2.41381 Tested on: Windows 10 HTML Injection in Netis-WF2419 Netis-WF2419 is prone ...