ASUS RT-G32 Router Multiple Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
BID:74378
Info
ASUS RT-G32 Router Multiple Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
| Bugtraq ID: | 74378 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 26 2015 12:00AM |
| Updated: | Apr 26 2015 12:00AM |
| Credit: | MustLive |
| Vulnerable: |
Asus RT-G32 2.0.3.2 Asus RT-G32 2.0.2.6 |
| Not Vulnerable: | |
Exploit / POC
ASUS RT-G32 Router Multiple Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
To exploit these issues an attacker must entice an unsuspecting victim into following a malicious URI or visiting a malicious website.
The following example data is available:
To exploit these issues an attacker must entice an unsuspecting victim into following a malicious URI or visiting a malicious website.
The following example data is available:
References
ASUS RT-G32 Router Multiple Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
References:
References:
- ASUS Homepage (ASUS)
- RT-G32 Product Page (Asus)
- XSS and CSRF vulnerabilities in ASUS RT-G32 (MustLive)