456 matches found
CVE-2025-5516
Summary (CVE-2025-5516): TOTOLINK X2000R firmware 1.0.0-B20230726.1108 contains a cross-site scripting vulnerability in the URL Filtering Page, specifically in the /boafrm/formFilter handling of the URL Address parameter. The lack of proper filtering/escaping allows injection of arbitrary scripts...
CVE-2025-5516 TOTOLINK X2000R URL Filtering Page formFilter cross site scripting
A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108. This affects an unknown part of the file /boafrm/formFilter of the component URL Filtering Page. The manipulation of the argument URL Address leads to cross site scripting. It is possible to...
CVE-2025-5516 TOTOLINK X2000R URL Filtering Page formFilter cross site scripting
A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108. This affects an unknown part of the file /boafrm/formFilter of the component URL Filtering Page. The manipulation of the argument URL Address leads to cross site scripting. It is possible to...
CVE-2025-5515 TOTOLINK X2000R formMapDel command injection
A vulnerability, which was classified as critical, has been found in TOTOLINK X2000R 1.0.0-B20230726.1108. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel. The manipulation of the argument devicemac1 leads to command injection. The attack may be launched...
CVE-2025-5515 TOTOLINK X2000R formMapDel command injection
A vulnerability, which was classified as critical, has been found in TOTOLINK X2000R 1.0.0-B20230726.1108. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel. The manipulation of the argument devicemac1 leads to command injection. The attack may be launched...
CVE-2025-5515
TOTOLINK X2000R (version 1.0.0-B20230726.1108) has a command injection vulnerability in /boafrm/formMapDel triggered by manipulating the devicemac1 parameter. Exploitation can be performed remotely, and the exploit has been disclosed publicly. The vendor reportedly did not respond to disclosure. ...
CVE-2025-5504
A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWsc. The manipulation of the argument peerRptPin leads to command injection. The attack can be initiated remotely. The exploit has bee...
CVE-2025-5504
A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWsc. The manipulation of the argument peerRptPin leads to command injection. The attack can be initiated remotely. The exploit has bee...
CVE-2025-5504 TOTOLINK X2000R formWsc command injection
A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWsc. The manipulation of the argument peerRptPin leads to command injection. The attack can be initiated remotely. The exploit has bee...
CVE-2025-5504 TOTOLINK X2000R formWsc command injection
A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWsc. The manipulation of the argument peerRptPin leads to command injection. The attack can be initiated remotely. The exploit has bee...
CVE-2025-5504
CVE-2025-5504 affects TOTOLINK X2000R 1.0.0-B20230726.1108. The issue is a vulnerability in the /boafrm/formWsc endpoint where manipulating the peerRptPin parameter leads to command injection. Remote attack is possible, and public exploitation has been disclosed. Several sources (NVD, Red Hat, CN...
TOTOLINK X2000R 注入漏洞
TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from incorrect manipulation of the parameter devicemac1, no details of the vulnerability are provided at this time...
TOTOLINK X2000R 代码注入漏洞
TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK X2000R, which stems from the lack of effective filtering and escaping of user-supplied data by the Device Name parameter in the component Parent Controls Page,...
TOTOLINK X2000R 注入漏洞
TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from the parameter peerRptPin failing to correctly filter constructed command special characters, commands, and so on. No details of the...
PT-2025-23675 · Totolink · Totolink X2000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R version 1.0.0-B20230726.1108 Description: The issue is related to a cross-site scripting vulnerability in the Virtual Server Page of the TOTOLINK X2000R router. This vulnerability can be exploited remotely by manipulating the...
PT-2025-23676 · Totolink · Totolink X2000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R version 1.0.0-B20230726.1108 Description: A vulnerability was found in the Parent Controls Page component of the affected software. The issue arises from the manipulation of the Device Name argument, leading to cross-site...
PT-2025-23626
Name of the Vulnerable Software and Affected Versions TOTOLINK X2000R version 1.0.0-B20230726.1108 Description A critical issue exists in the TOTOLINK X2000R router related to insufficient input validation when processing the peerRptPin parameter. Exploitation of this issue can allow a remote...
PT-2025-23651 · Totolink · Totolink X2000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R version 1.0.0-B20230726.1108 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /boafrm/formMapDel. The manipulation of the argument devicemac1 leads to command...
PT-2025-23655 · Totolink · Totolink X2000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R version 1.0.0-B20230726.1108 Description: A vulnerability was found in the TOTOLINK X2000R, affecting an unknown part of the file /boafrm/formFilter of the component URL Filtering Page. The manipulation of the URL Address...
