PT-2018-11734
CVE-2018-13310
·
تاريخ النشر
2018-11-26
·
تاريخ التحديث
2018-12-19
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
TOTOLINK A3002RU version 1.0.8
Description
The issue allows attackers to execute arbitrary JavaScript via the user's
username. This is a result of cross-site scripting in the password.htm file.Recommendations
For TOTOLINK A3002RU version 1.0.8, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾