CVE-2017-5900

Concrete details across connected documents show a stored XSS vulnerability in NetComm NB16WV-02 router (firmware NB16WV_R0.09) via the S801F0334 parameter to hdd.htm. Exploitation path: authenticated users can inject arbitrary script that may execute in others’ browsers. The issue is described a...

NetComm NB16WV-02 Cross Site Scripting

Hi, Mitre has provided the following with the CVE number: CVE-2017-5900 there is a Stored XSS vulnerability in a NetComm router's model NB16WV-02 running version NB16WVR0.09, If authorized user is able to inject the following string POC: Authenticated user is required:...