CVE-2023-30405

A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the wl_ssid parameter at /boafrm/formHomeWlanSetup.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:aigital:wireless-n_repeater_mini_router_firmware:0.131229:*:*:*:*:*:*:*
cpe:2.3:h:aigital:wireless-n_repeater_mini_router:-:*:*:*:*:*:*:*

History

08 May 2023, 14:04

Type Values Removed Values Added
CPE cpe:2.3:h:aigital:wireless-n_repeater_mini_router:-:*:*:*:*:*:*:*
cpe:2.3:o:aigital:wireless-n_repeater_mini_router_firmware:0.131229:*:*:*:*:*:*:*
References (MISC) https://packetstormsecurity.com/files/172057/Aigital-Wireless-N-Repeater-Mini_Router.0.131229-Cross-Site-Scripting.html - (MISC) https://packetstormsecurity.com/files/172057/Aigital-Wireless-N-Repeater-Mini_Router.0.131229-Cross-Site-Scripting.html - Exploit, Third Party Advisory, VDB Entry
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.4
CWE CWE-79
First Time Aigital wireless-n Repeater Mini Router
Aigital
Aigital wireless-n Repeater Mini Router Firmware

28 Apr 2023, 22:22

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-28 21:15

Updated : 2023-12-10 15:01


NVD link : CVE-2023-30405

Mitre link : CVE-2023-30405

CVE.ORG link : CVE-2023-30405


JSON object : View

Products Affected

aigital

  • wireless-n_repeater_mini_router_firmware
  • wireless-n_repeater_mini_router
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')