CVE-2015-2681
Beschrijving NL
Meerdere cross-site scripting (XSS)-kwetsbaarheden in de ASUS RT-G32-routers met firmware 2.0.2.6 en 2.0.3.2 stellen externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via de parameter (1) next_page, (2) group_id, (3) action_script of (4) flag in start_apply.htm.
Origineel (Engels) tonen
Multiple cross-site scripting (XSS) vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) next_page, (2) group_id, (3) action_script, or (4) flag parameter to start_apply.htm.