CVE-2023-51736

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the we...

CVE-2023-51736 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the we...

CVE-2023-51736

CVE-2023-51736 affects Skyworth Router CM5100 (v4.1.1.24). The root cause is insufficient validation of the L2TP/PPTP Username input on the router’s web interface, enabling a remote attacker to craft input that could trigger stored Cross-Site Scripting (XSS). Impact is stored XSS on the targeted ...