ASUS GT-AC5300 Cross-Site Request Forgery Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A cross-site request forgery vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. A remote attacker can exploit the vulnerability by sending a request to the startapply.htm page to change the administrat...

ASUS GT-AC5300 Cross-Site Scripting Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A cross-site scripting vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. A remote attacker can exploit the vulnerability by sending a 'hook' parameter to the appGet.cgi file to inject arbitrary web...

CVE-2018-17023

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

Cross site scripting

Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...

CVE-2018-17022

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.38432738 allows remote attackers to cause a denial of service device crash or possibly have unspecified other impact by setting a long shpath0 value and then sending an appGet.cgi?hook=selectlist"StoragexSharedPath" request,...

CVE-2018-17023

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

CVE-2018-17020

ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

Stack overflow

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.38432738 allows remote attackers to cause a denial of service device crash or possibly have unspecified other impact by setting a long shpath0 value and then sending an appGet.cgi?hook=selectlist"StoragexSharedPath" request,...

Code injection

ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line...

CVE-2018-17021

Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...

CVE-2018-17020

ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line...

CVE-2018-17021

Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...

CVE-2018-17020

ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line...

CVE-2018-17021

Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...

CVE-2018-17021

Summary: CVE-2018-17021 is an XSS vulnerability affecting ASUS GT-AC5300 routers (firmware up to 3.0.0.4.384_32738). The flaw allows a remote attacker to inject arbitrary web script or HTML via the appGet.cgi hook parameter. Affected software/entry details (from connected docs): ASUS GT-AC5300 ro...

CVE-2018-17022

CVE-2018-17022 affects ASUS GT-AC5300 routers (firmware 3.0.0.4.384_32738 and earlier). The issue is a stack-based buffer overflow in ej_select_list used by the web CGI code, triggered by sending a long sh_path0 value in a request to appGet.cgi?hook=select_list("Storage_x_SharedPath"), where strc...

CVE-2018-17020

CVE-2018-17020 affects ASUS GT-AC5300 devices with firmware up to 3.0.0.4.384_32738. The issue allows remote attackers to cause a denial of service by sending a single HTTP request line (GET / HTTP/1.1). Connected documents confirm the vendor/product and the repro vector, and describe the impact ...

CVE-2018-17023

Summary (CVE-2018-17023) The issue affects the ASUS GT-AC5300 router family, with firmware up to 3.0.0.4.384_32738. A cross-site request forgery (CSRF) vulnerability could allow an attacker to hijack administrator authentication and perform password-change actions via a request to start_apply.htm...

citymax-gt.com XSS vulnerability

Open Bug Bounty ID: OBB-655609 Description| Value ---|--- Affected Website:| citymax-gt.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...