Lucene search
Thiago Sena1337DAY-ID-28836HistoryOct 22, 2017 - 12:00 a.m.
TP-LINK TL-MR3220 Xss Vulnerability
2017-10-2200:00:00
Thiago Sena
0day.today
34
0.001 Low
EPSS
Percentile
45.4%
O que este produto faz
Compartilhe a liberdade do 3G! O Roteador Wireless N 3G/3.75G TL-MR3220 permite aos usuários compartilhar uma conexão de internet banda larga móvel 3G/3.75G com familiares e amigos enquanto estão acampando, em um hotel, e em praticamente qualquer lugar com cobertura de sinal 3G. Ao conectar um modem USB UMTS/HSPA/EVDO ao roteador, um ponto de acesso Wi-Fi é criado instantaneamente.
# Exploit Title: Vulnerability Xss - TP-LINK TL-MR3220
# Exploit Author: Thiago "THX" Sena
# Vendor Homepage: http://www.tp-link.com.br
# Version: TL-MR3220
# Tested on: Windows 10
# CVE : CVE-2017-15291
Vulnerabilty: Cross-site scripting (XSS) in TP-LINK TL-MR3220
cve: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15291
---------------------------------------------------------------
PoC:
0x01 - First you go to ( http://IP:PORT/ )
0x02 - In the 'Wireless MAC Filtering' tab.
0x03 - Will add a new MAC Address.
0x04 - In 'Description' it will put the script ( <script>alert('XSS')</script> ) and complete the registration.
0x05 - Xss Vulnerability
--------------------------------------------------------------
# 0day.today [2018-04-07] #Related
openvas
openvas
TP-Link TL-MR3220 XSS Vulnerability (CVE-2017-15291)
2017-10-25 00:00:00
exploitpack
exploitpack
TP-Link TL-MR3220 - Cross-Site Scripting
2017-10-12 00:00:00
prion
prion
Cross site scripting
2017-10-20 17:29:00
nvd
nvd
CVE-2017-15291
2017-10-20 17:29:00
cve
cve
CVE-2017-15291
2017-10-20 17:29:00
cvelist
cvelist
CVE-2017-15291
2017-10-20 17:00:00
exploitdb
exploitdb
TP-Link TL-MR3220 - Cross-Site Scripting
2017-10-12 00:00:00