0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Netis WF2419 Router - Cross-Site Scripting Vulnerability
Author
Risk
[Security Risk Medium
]0day-ID
Category
Date add
CVE
Platform
# Exploit Title: Netis-WF2419 HTML Injection # Exploit Author: Sajibe Kanti # Author Contact :https://twitter.com/@sajibekantibd # Vendor Homepage: http://www.netis-systems.com/ # Version: Netis-WF2419 , V3.2.41381 # Tested on: Windows 10 # CEV : CVE-2018-6190 HTML Injection in Netis-WF2419 Netis-WF2419 is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or script code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and control how the site is rendered to the user; other attacks are also possible. Netis-WF2419 is vulnerable; Proof of Concept: 1. Go to your wireless router ip (ex. 192.168.0.1) 2. Go to Wireless Settings - tab 3. Now Click MAC Filtering -tab 4.Write MAC Address and in -Description- write (<h1>XSS-PWD</h1>) 5.Click Add 6. Now You Can See HTML Injection #Solution: Upgrade Firmware # 0day.today [2024-10-06] #