EUVD-2018-11594

Malware in sbrugna...

CVE-2018-19922: Improper Neutralization of Input During Web Page Generation

Persistent Cross-Site Scripting XSS in the advancedsetupwebsiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd...

PT-2018-15166

Name of the Vulnerable Software and Affected Versions Actiontec C1000A router with firmware through CAC004-31.30L.95 Description The issue concerns a Persistent Cross-Site Scripting XSS flaw in the advancedsetup websiteblocking.html Website Blocking page. This allows a remote attacker to inject...