PT-2018-17526

Name of the Vulnerable Software and Affected Versions Netis WF2419 version 2.2.36123 Description A cross-site request forgery issue allows a remote attacker to delete Address Reservation List settings. Recommendations For Netis WF2419 version 2.2.36123, consider restricting access to the device's...

CVE-2018-6391: Cross-Site Request Forgery (CSRF)

A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...

Netis-WF2419 Cross Site Request Forgery

Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on: Windows 10 Technical Details & Descriptio...

Netis WF2419 Router - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on:...

Netis WF2419 Router - Cross-Site Request Forgery

Netis WF2419 Router - Cross-Site Request Forgery Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123...

Netis WF2419 Router - Cross-Site Request Forgery

Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on: Windows 10 Technical Details & Descriptio...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

Cross site scripting

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

CVE-2018-5967 affects Netis WF2419 devices (v2.2.36123) where the Description field on the Bandwidth Control Rule Settings page is vulnerable to XSS. The root cause is inadequate filtering of user-supplied data in that Description parameter, allowing a remote attacker to inject script/HTML into t...

PT-2018-17254

Name of the Vulnerable Software and Affected Versions: Netis WF2419 version 2.2.36123 Description: The issue allows for XSS via the Description parameter on the "Bandwidth Control Rule Settings" page. Recommendations: For Netis WF2419 version 2.2.36123, avoid using the Description parameter in th...

Netis WF2419 Cross-Site Scripting Vulnerability

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 2.2.36123, which is caused by the program failing to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

netis WF2419 cross-site scripting vulnerability (CNVD-2018-03057)

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 3.2.41381, which stems from the program's failure to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

CVE-2018-5967: Improper Neutralization of Input During Web Page Generation

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

Cross site scripting

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

CVE-2018-6190 affects Netis WF2419 routers (version 3.2.41381). The vulnerability is HTML injection/XSS on the MAC Filtering page via the Description field, caused by insufficient input sanitization. Exploitation could allow attacker-supplied HTML/script to execute in the router’s web UI context,...