TOTOLINK A3002RU Cross-Site Scripting Vulnerability (CNVD-2022-06507)

TOTOLINK A3002RU is a wireless router product from Taiwan-based TOTOLINK Corporation. tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 contains a security vulnerability that allows attackers to exploit it by modifying the " username" field or "password" field to execute arbitrary...

Cross site scripting

Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "User Name" field or "Password" field...

CVE-2021-34220

Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "User Name" field or "Password" field...

CVE-2021-34220

The CVE-2021-34220 entry concerns TOTOLINK A3002R family devices (notably A3002R with firmware version V1.1.1-B20200824). The vulnerability is a Cross-site Scripting (XSS) in tr069config.htm that can be triggered by modifying the "User Name" or "Password" fields, allowing an attacker to execute a...