14 matches found
Teltonika RUT9XX Cross-Site Scripting Vulnerability
Teltonika RUT9XX routers also known as LuCI is a router product from the Lithuanian company Teltonika. A cross-site scripting vulnerability exists in hotspotlogin.cgi in Teltonika RUT9XX with firmware version lower than 00.05.01.1, which can be exploited by attackers to conduct cross-site scripti...
Teltonika RUT9XX OS Command Injection Vulnerability
Teltonika RUT9XX routers also known as LuCI is a router product from the Lithuanian company Teltonika. An OS command injection vulnerability exists in autologin.cgi and hotspotlogin.cgi in Teltonika RUT9XX with firmware versions lower than 00.04.233, which can be exploited by remote attackers to...
CVE-2018-17532
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges...
CVE-2018-17533
Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization...
Cross site scripting
Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization...
CVE-2018-17533
Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization...
CVE-2018-17532
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges...
PT-2018-14045
Name of the Vulnerable Software and Affected Versions Teltonika RUT9XX routers with firmware prior to 00.05.01.1 Description The issue is related to cross-site scripting due to insufficient user input sanitization in the hotspotlogin.cgi file. Recommendations For firmware versions prior to...
CVE-2018-17533: Improper Neutralization of Input During Web Page Generation
Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization...
CVE-2018-17532: Improper Neutralization of Special Elements used in an OS Command
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges...
Teltonika RUT9XX Unauthenticated OS Command Injection
Teltonika RUT9XX Unauthenticated OS Command Injection Link: https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180319-01TeltonikaOSCommandInjection Vulnerability Overview Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command...
Teltonika RUT9XX Reflected Cross Site Scripting Vulnerability
Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization. Teltonika RUT9XX Reflected Cross-Site Scripting XSS Link:...
PT-2015-5892
Name of the Vulnerable Software and Affected Versions Hotspot Express hotEx Billing Manager version 73 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the reply parameter in the /cgi-bin/hotspotlogin.cgi API endpoint...
CVE-2015-2781: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx Billing Manager 73 allows remote attackers to inject arbitrary web script or HTML via the reply parameter...