CVE-2024-28092

UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, or RgParentalBasic.asp. The affected fields are SMTP Server Name, SMTP Username, Host Name, Ti...

PT-2024-14260

Name of the Vulnerable Software and Affected Versions Skyworth Router CM5100 version 4.1.1.24 Description The issue exists due to insufficient validation of user-supplied input for the Time Server 2 parameter at the web interface. A remote attacker could exploit this by supplying specially crafte...

CVE-2023-51721: Improper Neutralization of Input During Web Page Generation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...