The vulnerability of the eval() function in Totolink A3002R router microprogramming software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the eval function in Totolink A3002R router microprogramming software relates to the failure to eliminate instructions from the dynamically executed code. Exploiting this vulnerability could allow a remote attacker to perform domain--site attacks...