Airties AIR5444TT - Cross-Site Scripting Vulnerability

Exploit for windows platform in category web applications Exploit Title: Airties AIR5444TT - Cross-Site Scripting Exploit Author: Raif Berkay Dincel Vendor Homepage: airties.com Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 CVE-ID: CVE-2018-8738 Tested on: MacOS High Sierr...

Airties AIR5444TT - Cross-Site Scripting

Exploit Title: Airties AIR5444TT - Cross-Site Scripting Date: 2018-07-06 Exploit Author: Raif Berkay Dincel Vendor Homepage: airties.com Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 CVE-ID: CVE-2018-8738 Tested on: MacOS High Sierra / Linux Mint / Windows 10 Vulnerable...

Airties AIR5444TT - Cross-Site Scripting

Airties AIR5444TT - Cross-Site Scripting Exploit Title: Airties AIR5444TT - Cross-Site Scripting Date: 2018-07-06 Exploit Author: Raif Berkay Dincel Vendor Homepage: airties.com Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 CVE-ID: CVE-2018-8738 Tested on: MacOS High Sierr...

CVE-2018-8738

CVE-2018-8738 affects Airties AIR5444 and AIR5444TT devices running version 1.0.0.18. The vulnerability is a Cross-Site Scripting flaw in the web UI: a GET parameter (192.168.2.1/top.html?page=main&productboardtype=) is reflected without proper sanitization, enabling arbitrary script execution in...