XSS-CVE-2022-30489

WAVLINK WN535G3 POST XSS Usar CVE-2022-30489 CARGA POST /cgi-bin/login.cgi HTTP/1.1 Host: 98.127.66.193 Content-Length: 255 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://98.127.66.193 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 Windows NT 10.0;...

Wavlink WN-535G3 - Cross-Site Scripting

Wavlink WN-535G3 contains a POST cross-site scripting vulnerability via the hostname parameter at /cgi-bin/login.cgi. id: CVE-2022-30489 info: name: Wavlink WN-535G3 - Cross-Site Scripting author: For3stCo1d severity: medium description: | Wavlink WN-535G3 contains a POST cross-site scripting...

CVE-2022-30489

WAVLINK WN535 G3 was discovered to contain a cross-site scripting XSS vulnerability via the hostname parameter at /cgi-bin/login.cgi...

CVE-2022-30489

Vulnerability (CVE-2022-30489) : WAVLINK WN535 G3 (WN535 G3) is affected by a cross-site scripting (XSS) flaw in the POST parameter hostname on /cgi-bin/login.cgi. Root cause: insufficient input validation in the hostname field leading to script injection. Impact: attacker could cause arbitrary s...