TOTOLINK A3002R Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is an AC1200 wireless dual-band gigabit router. tcpipwan.htm in TOTOLINK A3002R version 1.1.1-B20200824 is vulnerable to cross-site scripting. The vulnerability can be exploited to execute arbitrary JavaScript by modifying the "service name" field...

TotoLink A3002RU 跨站脚本漏洞

Totolink TOTOLINK A3002RU is a wireless router product from Gion Electronics Totolink, Taiwan, China.A cross-site scripting vulnerability exists in TOTOLINK A3002R V1.1.1-B20200824, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could use th...

TotoLink A3002RU 跨站脚本漏洞

TOTOLINK A3002RU is an AC1200 wireless dual-band gigabit router. ddns.htm in TOTOLINK A3002R version 1.1.1-B20200824 is vulnerable to cross-site scripting. An attacker can modify the "domain" field, "server address" field, "username/email" or "password/key " field to execute arbitrary JavaScript...