TOTOLINK A3002RU Cross-Site Scripting Vulnerability (CNVD-2022-06507)

TOTOLINK A3002RU is a wireless router product from Taiwan-based TOTOLINK Corporation. tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 contains a security vulnerability that allows attackers to exploit it by modifying the " username" field or "password" field to execute arbitrary...

Cross site scripting

Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "User Name" field or "Password" field...

CVE-2021-34220

Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "User Name" field or "Password" field...

CVE-2021-34220

The CVE-2021-34220 entry concerns TOTOLINK A3002R family devices (notably A3002R with firmware version V1.1.1-B20200824). The vulnerability is a Cross-site Scripting (XSS) in tr069config.htm that can be triggered by modifying the "User Name" or "Password" fields, allowing an attacker to execute a...

CVE-2021-34220: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "User Name" field or "Password" field...

PT-2021-20403

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version V1.1.1-B20200824 Description: The issue allows attackers to execute arbitrary JavaScript by modifying the User Name field or Password field in the tr069config.htm page. This enables the execution of arbitrary JavaScrip...