mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 01:02:37 +02:00
783 B
783 B
CVE-2014-1407
Description
Multiple cross-site scripting (XSS) vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to inject arbitrary web script or HTML via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup.
POC
Reference
No PoCs from references.