CVE-2020-27366: CVE-2020-27366 - Pastebin.com

a guest

Aug 27th, 2023

21

0

Never

Not a member of Pastebin yet? Sign Up, it unlocks many cool features!

1. CVE Advisory: CVE-2020-27366

3. CVE ID: CVE-2020-27366

5. Title: XSS Vulnerability in ‘wlscanresults.html’ of Humax HGB10R-02 BRGCAB Router, Version 1.0.03

7. Researchers: brenocss, Leonardo Ventura

9. Description:

10. A Cross-Site Scripting (XSS) vulnerability has been discovered in the Humax HGB10R-02 BRGCAB router, version 1.0.03. This vulnerability resides within the ‘wlscanresults.html’ page, responsible for presenting wireless scan outcomes of nearby SSIDs. Due to inadequate sanitization, the SSID names are not being properly handled, thus enabling attackers to inject malicious JavaScript code into the page.