Lucene search
RootSSV:61321HistoryJan 13, 2014 - 12:00 a.m.
Conceptronic C54APM多个反射型跨站脚本漏洞
2014-01-1300:00:00
Root
www.seebug.org
12
0.002 Low
EPSS
Percentile
60.5%
CVE ID:CVE-2013-1407
Conceptronic C54APM是一款无线AP设备。
Conceptronic C54APM存在多个反射型跨站脚本漏洞，允许远程攻击者构建恶意URI，诱使用户解析，当恶意数据被查看时可获取敏感信息或者劫持用户会话。漏洞是由于goform/formWlSiteSurvey脚本不正确过滤submit-url参数，及goform/formWlanSetup脚本不正确过滤wlan-url参数引起的。
0
Conceptronic C54APM v2.0 1.26
目前没有详细解决方案提供：
http://www.conceptronic.net/es/download_list.php?stype=3&productid=341
Related
patchstack
patchstack
WordPress Events Manager Plugin <= 5.3.4 - Multiple XSS
2013-01-19 00:00:00
htbridge
htbridge
Multiple XSS vulnerabilities in Events Manager WordPress plugin
2013-01-16 00:00:00
packetstorm
packetstorm
WordPress Events Manager 5.3.3 Cross Site Scripting
2013-03-07 00:00:00
cve
cve
CVE-2013-1407
2014-05-13 14:55:00
securityvulns
securityvulns
Multiple XSS vulnerabilities in Events Manager WordPress plugin
2013-03-11 00:00:00
wpvulndb
wpvulndb
Events Manager 5.3.3 - Multiple Cross-Site Scripting (XSS)
2014-08-01 10:58:54
prion
prion
Cross site scripting
2014-05-13 14:55:00