Cross site scripting

Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...

CVE-2014-10019: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...

CVE-2014-10018: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...

PT-2015-3663

Name of the Vulnerable Software and Affected Versions Teracom T2-B-Gawv1.4U10Y-BI modem Description The issue affects the webconfig/wlan/country.html/country component of the modem, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers ...

PT-2015-3662

Name of the Vulnerable Software and Affected Versions Teracom T2-B-Gawv1.4U10Y-BI modem Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the essid parameter in the /webconfig/wlan/country.html/country endpoint. Recommendatio...