CVE-2018-13312

Cross-site scripting in noticegen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice URL" field...

CVE-2018-13312

CVE-2018-13312 describes a cross-site scripting vulnerability in TOTOLINK A3002RU (firmware version 1.0.8). The flaw exists in the notice_gen.htm page, where an attacker can modify the “Input your notice URL” field to inject arbitrary JavaScript. The vulnerability is web-based (network exploit ve...